Feature request: Require biometrics whenever using 1Password
TouchID is really convenient and take 2 seconds. I only need to get a password from 1password at a rate of less than once an hour. My request is to effectively require TouchID every time I retrieve a credential from 1Password and not leave the vault unlocked. Note that the existing activity timeout setting is broken for me. If the timeout were based on 1Password app activity, then 1Password would be able to implement this reliably. Note that other (older?) versions of 1Password seem like they might have some better settings here.
My goal is to protect against computer take over scenarios (both local and remote) by requiring TouchID as active 2FA rather than leaving things unlocked.
This would make the practice of storing 2FA codes in 1Password much more secure- TouchID would act as the master 2FA.
Others have shared these types of concerns before, for example here: https://1password.community/discussion/124865/is-my-vault-vulnerable-to-remote-attack-malware-if-i-leave-it-unlocked-in-whilst-at-the-computer
Note that the response says "yes, it's riskier". In my opinion the job of a security app such as 1Password is to let users determine their risk tolerance and setup things accordingly- can this feature be implemented for those of us that desire it?
1Password Version: 8
Extension Version: Not Provided
OS Version: Mac
Browser: Chrome