Two accounts - now needs two different passwords every time you login?

Hello @capsule,

At the moment, we can unlock all accounts at once using touchID. If we use the master password, 1Password indeed only unlocks the account with the correct master password.

I can't tell if the final release would allow users to unlock all accounts at once using one master password or for security reasons. The Security team decides it would be best to allow users to unlock only one account at a time. However, I would be happy to know your preference to send to the dev team for further consideration.

Best regards,

Nhat Nguyen.
https://support.1password.com/

To add to what my colleague Nhat said, our official recommendation here is:

When you’re invited to join a team, you’ll be asked to create a Master Password. Because you already use 1Password, enter the Master Password you already use.

Then you’ll be able to unlock the 1Password apps with your one Master Password to see the information in all your accounts.

If you signed up with a different password, you can change it.

(from https://support.1password.com/multiple-accounts/#use-your-master-password-for-all-your-accounts)

I hope that helps!

Ben

I have a long password for my personal account and our company has a long password for our main account. This sounds like a major step backward as far as usability. When I am online, I need access to both accounts. When my computer sleeps, that means I am forced to re-log into my accounts two times - again and again.

I have been a 1Passwrod user for so long and having dual accounts worked flawlessly. It is one selling point that I recommend to many people. Why change something that was not requested by your userbase? Why not at least give the user the OPTION to turn this "feature" on or off? Let the user have a choice and let them balance security with convenience - just like you do with password recommendations or auto-lock toggles?

@1P_Ben, the link goes to the current version - not the beta. I am a little confused, will the new one eventually have the abilitiy to have two accounts or will we be forced to enter multiple passwords? What is the difference between an invite and entering all the account info?

@Nhat_Nguyen This is absolutely unacceptable.

That is a BIG freaking nope. Give us the choice, not your security team. They do not know all our individual use cases or our risk preferences. Heck it may be individual per computer.

Not being able to unlock all accounts, at least as an option, is a deal breaker for myself and my companies. There is absolutely no purpose to 1password offering free family accounts for business if you make it so difficult to use. I encourage all my users to setup their own account so they can store their secrets securely and be a good internet citizen - AND its so easy, right? They open up 1password with ONE Password, they can access their company secrets and their personal.

If you make this change, then please rename your branding to something like PolyPassword, because it will require MANY passwords to use. The users will continue to use it for business because they have to, mostly, but they most certainly will not unlock it twice in a row just to get at their personal stuff too. That means either they'll stop using it for their personal stuff, or they will start storing that stuff in their business private vault - which will absolutely suck for them when they leave the company and lose access.

Also for users like myself that have access for a half dozen or more 1password accounts, this is absolutely game breaking. It's my desktop computer, in my office, in my house. It's freaking secure. Don't tell me it's not secure enough that I have to enter 6 or 12 different password to access all the data I may need to access.

I don't care about the electron drama, or the search sucking. But this absolutely is a hill worth dying on. I've been a loyal 1password customer for long enough that I've still got "Early Earl" launch special pricing (for my personal account, all the business accounts I pushed to get setup pay full price). But I'll toss that all of those go to another service if you tell me I need unlock my 1password with six different passwords.

PS. TouchID doesn't help Windows.

Yeah - I'm really confused by this as well. I opened up 1P8 (I have a personal and business account). I entered my personal master password, as I have done for years in 1P7, expecting to see everything. With 1P8 - I only see my personal information, not the business account. Moreover, there's no indication I'm only seeing my personal account. If I try searching for an item in my business vault I know to be there, there's no indication I won't find it.

This carries over to the Safari extension as well - I start searching for items I know should be in my business account, and nothing appears. The only indication I can see that shows I'm not logged into both is clicking the "All Accounts" dropdown from the main 1P8 window and seeing that there's still the lock icon over the business account.

Is that what is supposed to happen? If so - that seems like a huge regression? I will often go for a long while without opening the 1P app, and just use the browser extension. I don't see any option to log into both my personal and business account from the extension and no indication that I'm not logged into one. For example, I'm trying to autofill items I know are in my business account and the extension is just not finding them. And as far as I can tell, there is no way to actually log into the business account from the extension without going into the extensions settings.

I can't imagine this is the intended behavior - if there's any logs or some such I can send over please let me know.

@capsule

The recommendation of using the same account password for all 1Password accounts is the same in v7 and v8. It hasn't changed. The difference is that 1Password 7 will unlock all accounts, even if they have different passwords, whereas 1Password 8 selectively unlocks accounts based on the password entered.

@ShakataGaNai

You can still unlock all of your accounts simultaneously in v8 by using the same password for all of them. They will each still have their own unique Secret Key to protect against the normal threats caused with password reuse. "Touch ID" may not be a thing on Windows, but we do support Windows Hello and the various unlock methods that exposes, including fingerprints.

@topher1078

That is the intended behavior. If the accounts have different passwords then the only one that will unlock is the one with the password you entered. As mentioned above you can limit or expand which accounts are unlocked by setting their account passwords to be the same or not.

There are a few things you alluded to that I think we can look at more closely:

1. How to unlock additional accounts after initial unlock
2. Showing which accounts are locked/unlocked

I hope that helps!

Ben

Set up the SAME password for multiple accounts? Sorry, I think I am totally missing something. That would give every sing employee access to all my personal passwords and confidential information. I am surprise that is was even suggested.

@1P_Ben
I'm sorry, I can't tell if your suggested workaround is supposed to be a joke or not, I know things are fairly tough in here these days. What you've suggested is that we use a single password for multiple accounts. One of the very terrible security practices that 1Password is supposed to solve, is the re-use of passwords. In fact one of the features you advertise repeatedly on the website is "(1Passwords will) Identify weak or duplicate passwords,"

Your suggested "workaround" goes blatantly against this and I'd never recommend it to my users. I have a number of 1password accounts, as previously stated, and all of them have unique passwords.

The Biometrics are handy, but not a solve all. I cannot tell you the number of times I have had to manually unlock 1Password on my iPhone. At least once every day or so. Very annoying, but I'll consider it the price of security. Now entering 6 passwords every day? Heck no.

Again I repeat my statement.** Let myself or my business admin decide what our companies risk tolerance is for account unlocks**. Your security team is great, I'm sure. But they will always suggest things be done in the most secure way possible - that's their job (I know, I work in security). That doesn't mean it's user friendly. Or necessarily even the most secure in the grander scheme of things. If I want to allow my users to unlock their personal vault from the business password, that should be my choice - not your security teams. Or if I want them to use any of their passwords to unlock the business vault - same thing. If you're going to change how it works, give us the tools to decide and make good choices for our user base.

Along with a number of other things in 1Password 8, you've made a huge unilateral change that wildly effects a large number of users. With seemingly no desire for input from the community.

Could you help explain further how using the same Account Password would give your employees access to your data @capsule?

Each account still has its own unique Secret Key, which would rule-out anyone but yourself being able to access your data, even if they knew your Account Password.

Set up the SAME password for multiple accounts? Sorry, I think I am totally missing something. That would give every sing employee access to all my personal passwords and confidential information. I am surprise that is was even suggested.

Are you sharing an account with your employees? The recommended solution here is to have each employee have their own unique account, with their own account password and Secret Key, within the 1Password Business membership. This guide may help:

Administrators: Get started with 1Password

And then employees can also have their own entirely separate membership, at no additional cost, to store their personal data:

Get a free 1Password Families membership when you use 1Password Business

These accounts can have the same password, and doing so wouldn't expose any risk of the business having access to personal data.

Ben