Please reconsider your decision to requires us to type our 1Password account password every 2 weeks on iOS/iPadOS. I'm fine with typing that password every 2 weeks on my Mac and/or my PC (both with a physical keyboard) to make sure I don't forget it. Typing my strong password with a touch keyboard is a major PITA! In fact, I'm afraid this will turn out to be contra-productive, similar to big IT organizations requiring a new password every 90 days, resulting in people using less strong passwords... 1Password Version: 8 (all future versions) OS Version: iOS/iPadOS

+1. Requiring password on mobile devices every two weeks is quite a pain. And yeah, wordlist passwords make things easier, but they're also long, so you have to be super precise on a phone keyboard. The times when I have to pull up 1Password on my phone are often times where I'm in a rush and juggling other things (think: checkout counter while managing kids). Some alternatives I'd love for the team to consider: * As suggested by XIII, don't require typing master password if you use 1pwd on another platform where you have to type it occasionally anyway (assuming 1password knows what platforms you log in with) * Take the approach Signal uses with their iOS app: they don't block you from using the app, but they prompt you like this occasionally (frequently at first, but at progressively longer intervals each time you enter it). You could do this anytime someone changes their master password: * Or just go back to letting users self-select to only type their master password never/after device restart.

In the old app, there's a setting for this under "Settings" > "Advanced" > "Security" > "Require master password..." where you can set it to to wide range of options with the most lenient option being "After reboot of the device". Considering that you now can configure 1Password 8 on Windows to use the TPM module to practically never have to type your master password again, even after reboots and updates, I'm guessing that the setting mentioned earlier will make a return?

Hi XIII , We have to balance the need for convenience with the reality that if we extend the limit some customers will not be able to remember their passwords and eventually be locked out of their data if they remove fingerprint information, get a new phone, etc. What we do recommend is choosing a password that is strong but yet not too difficult to type on a mobile device. A wordlist password is a good place to start. Regards, Kevin

Please show some love to users that run your Apps on multiple platforms. If I already type my account password on macOS (and Windows) regularly, typing it on iOS/iPadOS has hardly any additional value, but it is a major PITA on those specific platforms. In fact, I already type it every time in Windows (no Windows Hello on my very old PC). My current workaround: keep v7 installed, so I can copy the account password from there and paste it in v8…

I would agree that the default behaviour is a great default for most people, however it feels like a big regression to me that the advanced setting to "Require master password" (and the possibility to set it to "After device reboot" or "Never") seems to be removed. As an advanced user I have (a few) strategies to make sure I never forget my 1password credentials, and have made an informed decision to rely on the face id for my phone security as part of that set of strategies. I would very much like to possibility to keep having the great user experience I've enjoyed with 1Password since biometric authentication was added to the phones, going back to fumbling with passwords - always at the most inconvenient time - is not something I'm looking forward to. If you intend to ship 1password v8 with this regression I would hope you investigated other ways to make the user experience better, for an example entering the password on one of my devices could bump the timer on all other devices. Though I suspect just allowing me to store the password indefinitely in the iOS Keychain is much simpler to implement and less error-prone.

1Password 8: account password required every 2 weeks?

Former Member
3 years ago
Glad to see this is customizable now in the iOS app, thanks for listening to our feedback!

1P_Ben any word on if we can expect the same for your desktop apps?
Former Member
3 years ago
Huge thanks for reverting this change and letting us disable this.
WorstDecisionWtf
New Contributor
3 years ago
This is a fucking terrible decision. Revert it. Now

Are you trying to get us to set weaker shorter master passwords? How fucking dumb
n9yty
Occasional Contributor
3 years ago
Turn off this stupid two week requirement. Let the user be responsible, stop trying to nanny them into what YOU think is best. I made it long and complex for protection, I have it stored securely, but not conveniently, and now I have to have it readily available in a non-secure location because I can't get to 1Password once you decide to lock it up on me.
Deg
New Contributor
3 years ago
1P_Ben, syncing the last authenticated time across devices would be very helpful!
Former Member
3 years ago
I fully agree with moontrx, please give us the master pw config option of mobile 1pw7 back!

Yesterday I was unpleasantly surprised by the fact that all my mobile devices requested me to enter my master pw at once. The same 32-char pw I keep in 1Password! I had to use my wife’s iPhone! Luckily we have a shared vault containing both our master pw, if that was not the case I would have had to look forp the printed pw in my physical vault.

I honestly have not read a single valid argument why the option to only require a person to enter the master pw after reboot, an option available for mobile devices, was removed. In 1Password 7 this feature was disabled by default and more or less hidden so accidental use was unlikely. As stated by one of the other posters, 1Password advices you to print your security info during the onboarding process so in case of disaster you can still use that as a fallback to access to you pw vault.
Former Member
3 years ago
I'm understanding the reason why 1Password is doing this and forgetting the 1Password password is a huge risk, but in the end, the user should make this decision and should be enabled to disable this restriction. From my point of view its a no-gu and not how biometrics works for me.

This option needs to come bug for all devices.
Former Member
3 years ago
Just upgraded and ran face-first into this. I was already getting frustrated by the frequency I needed to enter my master password on desktop, and now this on mobile.

This is a serious usability issues. As others have pointed out, this is part of the starting setup procedure - making sure that password is stored in a safe and secure location just in case. We shouldn't need to repeatedly enter it over and over again on a biometrically secured device. I'd even be okay with using yubikeys to unlock it after an extended period of time - but as it is, this is painful.

Please change course. I'll give it until the end of the year then start looking for a different solution.
moontrx
New Contributor
3 years ago
I just upgraded to 1Password 8 on my iPhone, and I could not believe there is no longer the option to opt out for requesting the MP every 2 weeks. This is a no-go guys. I do not like that anyone else decides for me how often I need to get forced to enter my MP. This has to be my decision and my risk, not yours!

I'm ok with the restriction on a desktop environment, but even there I would prefer 4 instead of 2 weeks.

So please, please bring here as soon as possible remediation.
Former Member
3 years ago
Have folks with multiple accounts (ex: personal and work) found you’ve needed to enter each account’s password every two weeks?

Forum Discussion

1Password 8: account password required every 2 weeks?

Recent Discussions

Support for Zen Browser

MacOS: “1Password” would like to access data from other apps?

Safari says "Open 1Password"

Request: 1Password support for autofill on input fields with type="search"

Auto-fill frequently stops working (macOS, Safari)