1Password 8: account password required every 2 weeks?

I just upgraded to 1Password 8 on my iPhone, and I could not believe there is no longer the option to opt out for requesting the MP every 2 weeks. This is a no-go guys. I do not like that anyone else decides for me how often I need to get forced to enter my MP. This has to be my decision and my risk, not yours!

I'm ok with the restriction on a desktop environment, but even there I would prefer 4 instead of 2 weeks.

So please, please bring here as soon as possible remediation.

Just upgraded and ran face-first into this. I was already getting frustrated by the frequency I needed to enter my master password on desktop, and now this on mobile.

This is a serious usability issues. As others have pointed out, this is part of the starting setup procedure - making sure that password is stored in a safe and secure location just in case. We shouldn't need to repeatedly enter it over and over again on a biometrically secured device. I'd even be okay with using yubikeys to unlock it after an extended period of time - but as it is, this is painful.

Please change course. I'll give it until the end of the year then start looking for a different solution.

I'm understanding the reason why 1Password is doing this and forgetting the 1Password password is a huge risk, but in the end, the user should make this decision and should be enabled to disable this restriction. From my point of view its a no-gu and not how biometrics works for me.

This option needs to come bug for all devices.

I fully agree with moontrx, please give us the master pw config option of mobile 1pw7 back!

Yesterday I was unpleasantly surprised by the fact that all my mobile devices requested me to enter my master pw at once. The same 32-char pw I keep in 1Password! I had to use my wife’s iPhone! Luckily we have a shared vault containing both our master pw, if that was not the case I would have had to look forp the printed pw in my physical vault.

I honestly have not read a single valid argument why the option to only require a person to enter the master pw after reboot, an option available for mobile devices, was removed. In 1Password 7 this feature was disabled by default and more or less hidden so accidental use was unlikely. As stated by one of the other posters, 1Password advices you to print your security info during the onboarding process so in case of disaster you can still use that as a fallback to access to you pw vault.

@1P_Ben, syncing the last authenticated time across devices would be very helpful!

Turn off this stupid two week requirement. Let the user be responsible, stop trying to nanny them into what YOU think is best. I made it long and complex for protection, I have it stored securely, but not conveniently, and now I have to have it readily available in a non-secure location because I can't get to 1Password once you decide to lock it up on me.

This is a fucking terrible decision. Revert it. Now

Are you trying to get us to set weaker shorter master passwords? How fucking dumb

Huge thanks for reverting this change and letting us disable this.

Glad to see this is customizable now in the iOS app, thanks for listening to our feedback!

@1P_Ben any word on if we can expect the same for your desktop apps?

Hi all,

Thank you for the continued input here. As some of you have noticed, we are changing this in the mobile apps to offer more flexibility. There is still lots of discussion around this, and so I won't be surprised if further changes are coming in this space, but no definite decisions have been communicated to me yet.

I'd likely to take the opportunity to highlight:

1. It is critically important that you memorize your account password and be able to type it. If not, the chances you eventually lose access to your data stored in 1Password skyrocket. Our support team will not be able to assist if this happens. Unlike authentication-based services, because 1Password is end-to-end encrypted; there is no "forgot password" function. If you lose your keys (Secret Key and/or account password) — that's it. Game over. I stress this because most services aren't end-to-end encrypted and as such people are accustom to being able to forget their passwords, plug in their email address, and get a new password. It does not work that way with 1Password.
2. The Emergency Kit can help. We recommend printing this document, and writing your account password on it. Then store the completed document in a safe place. The Emergency Kit will not help if you haven't written your account password on it and kept it up to date. The Secret Key alone is not enough to access your account. Both are required to access your account.
3. Implement a recovery plan for your family (or team). Account recovery can be performed by a Family Organizer or business administrator. We would strongly encourage you to have multiple people with these roles if you are part of a family/business membership. If you are the only Family Organizer for your family, and you forget your account password, not only does that put you in a tight spot, it puts your whole family in a tight spot.

More to come. 😃

Ben