1Password 8: account password required every 2 weeks?

I think the idea that this every two week system will assure that people know their master password isn't really well thought out. This feature is particularly annoying when running with two accounts, because they both lock out at the same time. Luckily I can look up both on my phone and (continuity) copy/paste, but I would prefer a single unlock password like we used to have with 1Pass7. Maybe Yubikey or "authenticate on authorized device" type system would work too.

Just chiming in to say that I hope the suggestion of synchronising the reset period and extending the period to three weeks on mobile is considered as having to enter the MP on mobile defeats the entire purpose of AutoFill, especially seeing as the device is already secured with a password and biometrics.

Thanks

@1P_Ben It doesn't solve all case. If you are primary working on MacOS, use Touch ID every day and then, at the end of the 2 weeks window go out and need to access 1Password on your iOS device. You still have a chance that 1Password would require you to manually provide the password on iOS. Which isn't great. It's still a step in the good direction. You could had logic that would know if the user is using both MacOS and iOS, then only ask the password on MacOS in the 2 weeks windows and allow a 4 weeks window on iOS. You would have more chance to input your password only on MacOS, when not in a rush on iOS. Or just allow a window of 4 weeks across all devices. At least we would have to input it 12 times in a year and not 26 times. Thanks.

The world (Apple and Google) is going into a direction where passwords are not needed. A password manager should be a thing that lets me stop thinking and worrying about passwords. Master password should be very strong, if I'm forced to enter it then I have to remember it or keep it on a paper that I'm carrying with me everywhere, another solution is to have a weak master password. It defeats the purpose of having a password manager in the first place.

I'd also like to add a big +1 to the situation where you have more than one 1P account. I've used 1P for years, and convinced the company where I work a few years back on using it too - so I'm logged into 2 separate 1Password accounts constantly (primary: personal, secondary: work).

With 1Pv8, now when I'm forced to re-auth (with my strong but memorable passphrase) every 2 weeks - it's a real pain especially on mobile, but I cope.

However, what really bothers me is that I'm never prompted to log back into the 2nd (work) account. Instead, I'm forced to go through a convoluted process to get it unlocked (have to use the program menus, select Accounts, then select "Sign in to another account", then go to "Sign in on 1Password.com" for some reason, then click on a web link that takes me back to the app (???), then finally I get to authenticate). I don't even bother to try that on my mobile device anymore, which as everyone noted can be a pain for other reasons.

I seriously hope at least the latter issue can be addressed - and agree that the "until reboot" option, at the very least, should be given to the users - rather than force-treating everyone as being incapable of remembering their master password :)

Today another 2 weeks seems to have passed and I was forced to enter my master password again while I was trying to use autofill in the German DHL app.
What I then did was open the 1Password App and enter my MP there. However this does not seem to have unlocked autofill in the app, i.e. I am still asked to enter my MP there.
Is this intended to work that way or is this a bug?

Echoing @sectwykr thoughts entirely. I have multiple team accounts for my clients, having to re-enter my password, which is long convoluted and secure, into all my devices every two weeks is a horrid experience. I love with 1Password since almost day 1, and never had an issue with remembering the master password... why now? Please give us the option to turn this off, you are costing us time and creating frustration. Not productive.

It’s even more horrid seeing as not only do you have to enter the master password every two weeks, if the prompt appears when using Safari AutoFill (my primary use for 1P), you then have to manually open the 1Password app and enter it there too, otherwise it will continue prompting for the password every time.

I get that this is a limitation of apple’s AutoFill API, but surely there’s a better solution to this, at least the aforementioned timeout sync and additional grace period that would hopefully minimise the chances of having to enter the MP on mobile at all.

Any update on this? This new feature is such a PITA, and for whatever reasons seems way more frequent than 2 weeks.

Users should have the option to opt out or in to these kind of QoL features. Everyone has their own unique level of security requirements, and this may vary by vault even.

I have a long passphrase for my 1password account. Typing it is ok on my mac, a pain on iOS.

The biggest pain, though is being asked to do this at inconvenient times. Having awareness between mac and iOS would be great and, hopefully all but eliminate the need to type in on the phone. It doesn’t, however, stop me being asked at inconvenient times (especially if someone could see my typing). Could 1Password allow skipping verification for a while?

For example:
- two weeks after last verification a banner shows in 1pw asking me to verify. I can do it at my convenience. After, say, another 2 weeks if I haven’t verified, then I am forced to as currently.
- And/or use notifications to prompt - particularly for people who rarely open the main app.

I’d also be interested to know why two weeks was chosen. Is there evidence that if the period is longer a significantly higher number of people forget their master password?