Skip to main content
October 11, 2021
Question

1Password8/Windows and Windows Hello on first signin?

  • October 11, 2021
  • 47 replies
  • 1211 views

Hi! I'm trying to figure out why manually entering my master password is required on first run of the 1Password 8 app on Windows, and Windows Hello can only be used after initial sign in when 1Password relocks. On iPhone/iPad (and maybe Mac?), you can use FaceID for the initial sign in. Is that difference intentional (it seems like it from the release notes), and if so what is the reasoning?

Thanks!


1Password Version: 8.2.2
Extension Version: Not Provided
OS Version: Windows 11

47 replies

1P_PeterG
1Password Alum
February 24, 2022

@pratnala - that's fantastic, thank you for the confirmation!

Sorry to hear this, @BSi - may I ask what kind of processor you're using? We definitely want to track down any issues folks are having with this and provide as wide a base of support for this feature as we can.

February 24, 2022

@1P_PeterG I must add that I had to restart a couple of times for it to work right after reboot. It said something about windows hello getting reset.

February 24, 2022

@1P_PeterG it's an i7-7700HQ

MikeT
1Password Employee
1Password Employee
February 24, 2022

Hi @pratnala,

Thanks for letting us know.

The Windows Hello has been reset message happens when the app sees different data back from Windows Hello (TPM actually) compared to the previous Windows Hello attempts.

It usually happens when there is a Windows update or something else has changed in the hardware stack (drivers, system crashes, etc) that caused 1Password to fall back to the account password. Sometime a reboot is required to "fully clear" it and to let it work from there on until the next Windows update.

1P_PeterG
1Password Alum
February 24, 2022

Thank you @BSi - we'll make sure to note this and use it to inform our next phase of troubleshooting. Sorry it hasn't worked for you on the first go!

MikeT
1Password Employee
1Password Employee
February 25, 2022

Hi @BSi,

Can you confirm that Windows is reporting TPM 2.0 is enabled for your CPU? Here's how to check for TPM 2.0 status: https://support.microsoft.com/en-us/windows/enable-tpm-2-0-on-your-pc-1fd5a332-360d-4f46-a1e7-ae6b0c90645c

According to Microsoft's Windows 11 docs here, that CPU is not on the supported list, it is possible that your CPU is not supported for our feature as well.

February 25, 2022

Hi @MikeT ,

thanks for your reply, I could confirm that the TPM chip is enabled and used by Windows:

I'm using Windows 10 not Windows 11. Also the CPU exclusion from Win 11 is a bit debatable as there's not easy to draw a line about CPU security. They're frequently revising their opinions about this and adding more CPUs to the supported list from time to time. For example on the original list i7-7800 wasn't listed, but now they're also there. Anyway, in case 1PW using the same model to exclude CPUs from this feature, then I think it would be much more friendlier from user's perspective if that would be communicated clearly, along with describing why some of the CPUs got excluded.

February 25, 2022

For me it's also not possible to enable TPM support. It's on a Intel i7-6700K. The TPM info from Windows 10 is this:

MikeT
1Password Employee
1Password Employee
February 26, 2022

@BSi and Former Member,

Can you email us your 1Password diagnostics report, so we can get a clear picture of why it is not seeing it.

Here's how to generate the report on Windows

Email the report to support+forum@1password.com and in your email, please include:

@BSi

I'm using Windows 10 not Windows 11. Also the CPU exclusion from Win 11 is a bit debatable as there's not easy to draw a line about CPU security.

Windows 11 isn't required for this support but it is the first Windows OS where Microsoft require TPM 2.0 support by default and this list contain the verified Intel CPUs that has the hardware driver that compiles with the security baseline which includes TPM 2.0.

We're not hardcoding anything in our implementation, I am only checking to see if your CPU is on the list in case MS already tested it. The fact that the CPU is not the list may mean that it may not be fully supported. Unfortunately, this does mean we can't use this list as it isn't accurate either given our testings.

along with describing why some of the CPUs got excluded.

We do agree, we plan to add some information to indicate why it is not enabled. There are some difficulties at the moment to make it work accurately.

krtickak
February 26, 2022

@MikeT I also have this issue and I'm unable to enable this feature even though I have HW TPM 2.0 module.

Currently running Windows 11 (Build 22000.527) with HW TPM on Ryzen 9 5900X.
1Password version is 8.6.0-43 which is latest beta
Diagnostic file should be in your support inbox.