Please reconsider your decision to requires us to type our 1Password account password every 2 weeks on iOS/iPadOS. I'm fine with typing that password every 2 weeks on my Mac and/or my PC (both with a physical keyboard) to make sure I don't forget it. Typing my strong password with a touch keyboard is a major PITA! In fact, I'm afraid this will turn out to be contra-productive, similar to big IT organizations requiring a new password every 90 days, resulting in people using less strong passwords... 1Password Version: 8 (all future versions) OS Version: iOS/iPadOS

+1. Requiring password on mobile devices every two weeks is quite a pain. And yeah, wordlist passwords make things easier, but they're also long, so you have to be super precise on a phone keyboard. The times when I have to pull up 1Password on my phone are often times where I'm in a rush and juggling other things (think: checkout counter while managing kids). Some alternatives I'd love for the team to consider: * As suggested by XIII, don't require typing master password if you use 1pwd on another platform where you have to type it occasionally anyway (assuming 1password knows what platforms you log in with) * Take the approach Signal uses with their iOS app: they don't block you from using the app, but they prompt you like this occasionally (frequently at first, but at progressively longer intervals each time you enter it). You could do this anytime someone changes their master password: * Or just go back to letting users self-select to only type their master password never/after device restart.

In the old app, there's a setting for this under "Settings" > "Advanced" > "Security" > "Require master password..." where you can set it to to wide range of options with the most lenient option being "After reboot of the device". Considering that you now can configure 1Password 8 on Windows to use the TPM module to practically never have to type your master password again, even after reboots and updates, I'm guessing that the setting mentioned earlier will make a return?

Hi XIII , We have to balance the need for convenience with the reality that if we extend the limit some customers will not be able to remember their passwords and eventually be locked out of their data if they remove fingerprint information, get a new phone, etc. What we do recommend is choosing a password that is strong but yet not too difficult to type on a mobile device. A wordlist password is a good place to start. Regards, Kevin

Please show some love to users that run your Apps on multiple platforms. If I already type my account password on macOS (and Windows) regularly, typing it on iOS/iPadOS has hardly any additional value, but it is a major PITA on those specific platforms. In fact, I already type it every time in Windows (no Windows Hello on my very old PC). My current workaround: keep v7 installed, so I can copy the account password from there and paste it in v8…

I would agree that the default behaviour is a great default for most people, however it feels like a big regression to me that the advanced setting to "Require master password" (and the possibility to set it to "After device reboot" or "Never") seems to be removed. As an advanced user I have (a few) strategies to make sure I never forget my 1password credentials, and have made an informed decision to rely on the face id for my phone security as part of that set of strategies. I would very much like to possibility to keep having the great user experience I've enjoyed with 1Password since biometric authentication was added to the phones, going back to fumbling with passwords - always at the most inconvenient time - is not something I'm looking forward to. If you intend to ship 1password v8 with this regression I would hope you investigated other ways to make the user experience better, for an example entering the password on one of my devices could bump the timer on all other devices. Though I suspect just allowing me to store the password indefinitely in the iOS Keychain is much simpler to implement and less error-prone.

1Password 8: account password required every 2 weeks?

WorstDecisionWtf
New Contributor
3 years ago
Is the option available in android yet?

Edit: Ah. I see it is. You can delete this post
Backspaze
Frequent Contributor
3 years ago
1P_Ben do you have any further information regarding adding an option for "after reboot" as it was in 1PW7? I haven't reread the entire thread, but if I recall correctly, most of the comments have been about adding the "never" option back, while I would've been happy with an "after reboot" option. So I realize I'm in the minority here, but it would be great to have that option back as well.

My way of making sure that I'll remember my password is through the use of the "after reboot" option. It's something I have control over when it happens (compared to the prior only option of a 2 week interval) and I usually only reboot my devices when an update requires it.

As it is right now, "every 2 weeks" is too often, so "never" or "every 30 days" are the only remaining options, but none of them really suits my use case. "Never" means I never have to enter my password and risk forgetting it, and "every 30 days" is something I don't have control over when it happens, as opposed to "after reboot".
Backspaze
Frequent Contributor
3 years ago
@KDDU360 it is optional since the latest release, and now it's also optional on Windows as well (at least if you're using the beta version and are on 8.9.4 or higher).
Former Member
3 years ago
Forcing a password entry every 2 weeks on iPhone/iPad should be optional and not mandatory,
DenalB
Frequent Contributor
3 years ago
Hey Backspaze !

Same with me ...
https://1password.community/discussion/133120/stable-release-v8-9-3-not-available-in-testflight
Backspaze
Frequent Contributor
3 years ago
Thanks for the quick reply 1P_Ben, I've sent an email and we'll see where it goes.
1P_Ben
1Password Team
3 years ago
Backspaze

I'm seeing v8.9.4 beta in TestFlight. Please reach out to us at support@1password.com via email so we can troubleshoot. 😃

Ben
Backspaze
Frequent Contributor
3 years ago
1P_Ben is the TestFlight app not updated anymore? I was a bit surprised to get a string of notifications for this thread with thank you messages for adding the feature back, but I couldn't find the setting in my app. Taking a look in the App Store I can see that it's now running version 8.9.3, while the TestFlight version still remains at 8.9.2 which seems a bit backward.

I want to remain on the beta branch to test new features, but if you've dropped that for iOS/iPadOS I might as well uninstall the app from TestFlight and download the app from the App Store.
Former Member
3 years ago
@ben All of that is great advice, and makes sense to have that presented to the user very strongly when they change the password required interval. Hopefully that is compromise enough to keep the "never" setting and have that on all platforms.
1P_Ben
1Password Team
3 years ago
Hi all,

Thank you for the continued input here. As some of you have noticed, we are changing this in the mobile apps to offer more flexibility. There is still lots of discussion around this, and so I won't be surprised if further changes are coming in this space, but no definite decisions have been communicated to me yet.

I'd likely to take the opportunity to highlight:

It is critically important that you memorize your account password and be able to type it. If not, the chances you eventually lose access to your data stored in 1Password skyrocket. Our support team will not be able to assist if this happens. Unlike authentication-based services, because 1Password is end-to-end encrypted; there is no "forgot password" function. If you lose your keys (Secret Key and/or account password) — that's it. Game over. I stress this because most services aren't end-to-end encrypted and as such people are accustom to being able to forget their passwords, plug in their email address, and get a new password. It does not work that way with 1Password.

The Emergency Kit can help. We recommend printing this document, and writing your account password on it. Then store the completed document in a safe place. The Emergency Kit will not help if you haven't written your account password on it and kept it up to date. The Secret Key alone is not enough to access your account. Both are required to access your account.

Implement a recovery plan for your family (or team). Account recovery can be performed by a Family Organizer or business administrator. We would strongly encourage you to have multiple people with these roles if you are part of a family/business membership. If you are the only Family Organizer for your family, and you forget your account password, not only does that put you in a tight spot, it puts your whole family in a tight spot.

More to come. 😃

Ben

Forum Discussion

1Password 8: account password required every 2 weeks?

Recent Discussions

Auto-fill frequently stops working (macOS, Safari)

1Password 7 deprecation

Sharing with other 1Password users

How does family access Vault

limiting search