1Password on Work machines - risks from admin resetting passwords (Windows Hello)

Windows Hello is reset and PIN/saved credentials within Windows are invalidated if an admin resets the Windows account password. This is not the case if the user changes his password himself, but it is the case if an admin resets the password.

This is because any Windows-saved credentials are encrypted with the Windows account password in some Windows secure storage, so to carry over to a new account password, the existing account password is required to decrypt the saved credentials, then re-encrypt with the new password. Since the admin just overwrites a password without knowing the previous, saved credentials such as the Hello Pin cannot survive such a reset. This is a Windows mechanism and has nothing to do with 1Password.

Many thanks for that reply. So in short, if I use 1password on a work machine with face unlock with windows hello - the threat from work admin would be negligible risk - would you agree with that?

Sorry for the delay - I thought I would get an emai notification

@mike48397289 I agree it's a low risk. I cannot say it's impossible to gain access, but I say it's a low risk.