Skip to main content
March 4, 2023
Question

Set 2FA every login

  • March 4, 2023
  • 1 reply
  • 353 views

Hi,

I use a YubiKey NFC.

For example, I can deauthenticate my MacbookPro and request a 2FA for the next login.
Is it possible to request this for every login so that a login is only possible via e.g. YubiKey or Google Authentication?

thanks

Martin


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser:_ Not Provided

1 reply

1P_Dave
1Password Employee
March 6, 2023

Hello Former Member! 👋

Two-factor authentication (when using something like an authenticator app or YubiKey) only prevents others from adding your account to a new device. Once an account is added to a device you'll need to use your account password (or biometrics) to unlock the app and decrypt your data: Authentication and encryption in the 1Password security model

Are you looking for the ability to always be prompted for your YubiKey, in addition to the account password, before 1Password unlocks? Can you tell me a little more about what kind of attack you're trying to protect against?

I look forward to hearing from you. 🙂

-Dave

March 20, 2025

The reason I would like to be prompted for 2FA at each login is that I am sometimes using a shared PC. 

1P_Dave
1Password Employee
March 20, 2025

@maxi36sailor 

I recommend that you only use 1Password on a device that you trust. If you do need to use 1Password on a shared device then you can lock 1Password manually before stepping away. You can also adjust your auto-lock preferences to be more strict: 


Once 1Password locks, the only way to unlock the app is to type in your account password (or biometrics if you've set those up). 

-Dave