Signing back into the Community for the first time? You'll need to reset your password to access your account.  Find out more.

Forum Discussion

bugwhat's avatar
bugwhat
New Contributor
2 years ago

Manually locking the app

I am really excited about the recent update to 1Password, however something just does not make sense to me.
First of all I think face i.d. is really secure, but what if you want to enhance your security one step farther temporarily, like if your in a unique situation due to your surroundings or very unusual situation.
So you immediately, decide to manually lock 1Password by tapping the top left icon and then the lock.
A little later you decide to sign back in to 1Password and low and behold their are freely two
options. Enter your master password or click the face i.d. symbol.
This is what does not make sense to me.
I think when you manually lock 1Password it is an intentional act and therefore one would expect to just have the initial option of master password only for the resign-in.
Then after you resign-in the face i.d. is back in play unless you manually sign out again.
Not to confuse anybody, but when the new technology called passkeys takes hold my beef want matter, but until that happens I request that when one signs out of 1Password manually that their only be an option to sign back in using only the master password.

  • bugwhat

    Thank you for the detailed feedback! While I can't make any promises, I've passed your comments and suggestions along to our product team so that they can consider them for future updates to 1Password. 🙂

    -Dave

    ref: PB-32403729

  • bugwhat's avatar
    bugwhat
    New Contributor

    I mean no.
    This is what I want.
    Forget the face i.d. it will take care of itself.
    Also forget the Lock cause It does not work accordingly to the way I think it should.
    So leave your way.
    Let’s start over.
    All I want is the option for 1Password to require a password for 1Password if I restart my iPhone.
    All you have to do is insert that in the same place in 1Password, settings, security, require password same place as (every two weeks) is.
    Can you request that to happen.
    Then I can select after restart and nobody has to select after restart if they do not like it.
    Thanks

  • bugwhat's avatar
    bugwhat
    New Contributor

    you
    Are there specific situations where you'd like to disable Face ID but have it still be available available in other situations?

    other
    Yes.

  • bugwhat's avatar
    bugwhat
    New Contributor

    you
    If you're worried about Face ID then why not just disable it entirely?

    other
    Because it is more convenient is why people enable face i.d..
    Some like having face i.d on and I bet you do too, but if one intentionally taps the lock it would seem smarter to require the master password.
    It is ridiculous silly almost to give the option for someone who already has face i.d. enabled to still have the convenience after taping lock to still be able to re sign-in using the face i.d. without having to enter just the master password.
    Maybe I misinterpreted what the lock is for.
    Is it for closing the app if someone is peaking over my shoulder?
    If so then I can already close the app in three ways.

    other
    It is not about worry it is about security.
    If one taps the lock then you should be an option to be signed out of 1Password.
    If one restarts their iPhone it should be an option to be signed out of 1Password.
    One of those used to be an option and I remember one time a while back the restart was mandatory for a while and then became an option before yaw did away with both!
    These are just two options being asked for would not clutter up the app.
    I ask why not give back these options along with the two weeks option etc.

    you
    If someone forces you to use Face ID to unlock 1Password then wouldn't they also be able to force you to enter your passcode or account password?

    other
    Someone could put an iPhone to a face while one is sleeping or if you wake them up and as soon as one opens their eyes in a sneaky manner..

    you
    When 1Password is locked you'll need to use your account password to unlock the app. If you've enabled Face ID, or passcode, unlock for 1Password then you'll be able to use Face ID or your device's passcode to unlock the app instead. You can read more about the security of using Face ID with 1Password here: About Face ID security in 1Password for iOS.

    other
    If one enables in the password option in 1Password settings, security and then taps the lock then try’s to unlock again I have to say correctly no the face i.d.. option is not their which is the way it should be.
    Let’s see if yaw can get that to be the case if one picks face i.d. for unlock and the taps the lock to only have the option to sign back in using the master password.
    One does not want to have to enter the master password if they’re using face i.d., but only if they tap the lock or restart.
    Make it an option not mandatory.
    Again maybe the lock is just for closing the app and not signing totally out.
    You tell me.

    other
    I say keep face i.d. on 1 in a million chance.
    I also say let one have the option to completely sign out even if face i.d.is enabled if one taps the lock or restart their device that’s all.
    I have said all I can about this subject.
    Why would I ever tap the lock if it keeps face i.d. enabled?
    I can just close the app and have the same effect.
    Still signed in.

  • Hello bugwhat! 👋

    When 1Password is locked you'll need to use your account password to unlock the app. If you've enabled Face ID, or passcode, unlock for 1Password then you'll be able to use Face ID or your device's passcode to unlock the app instead. You can read more about the security of using Face ID with 1Password here: About Face ID security in 1Password for iOS

    You can control how often you're prompted for your account password:

    1. Open and unlock 1Password.
    2. Tap the icon for your account or collection at the top left and choose Settings. (If you’re using an iPad, tap your account or collection at the top of the sidebar.)
    3. Tap Security.
    4. Change "Require password" to the desired time.

    It is not other people’s face I am worried about. It is my own face by force.

    Can you tell me more about this? If you're worried about Face ID then why not just disable it entirely? If someone forces you to use Face ID to unlock 1Password then wouldn't they also be able to force you to enter your passcode or account password? Are there specific situations where you'd like to disable Face ID but have it still be available available in other situations?

    -Dave

  • bugwhat's avatar
    bugwhat
    New Contributor

    So the only way to fix this is to deselect face i.d. as my sign in.
    I remember 1Password used too about a year ago would make me enter the Master Password if I manually locked or if I tried face i.d. multiple times with my finger in the way it would require the Master Password.
    I think I remember at one time if you restarted your iPhone 1Password would require a Master Password. I get that would be taking it a little to far, because you have your iPhone master password to protect after restart, but not if you manually lock the app I think it should be mandatory to enter your master password or pin for those that prefer that.
    Not any more. Seriously!
    It is not other people’s face I am worried about.
    It is my own face by force.
    You can keep it the way it is by default, but how could it hurt to give the option in settings to require
    the master password if I manual lock the app.
    What could it hurt?
    The way it is setup now if I want to lock the app I can just close the app without going to left corner, icon, tapping lock.
    It is the same outcome as closeing or flicking out the app using the app switcher.
    You can truly make lock a lock if you would.
    I know you might say people would forget their master password and that is why, but those people are using pins probably which is another risk in itself, if it is too short.
    So please change you policy and make lock a true lock.

  • bugwhat's avatar
    bugwhat
    New Contributor

    If I manually lock 1Password I can keep trying to sign in even if it is not your face also.
    Or even if I do not manually lock 1Password in all cases it keeps letting me try to use face i.d. even if I put my hand over my face.
    After manually locking out let’s say you close out the app it does not require the master password that way either.