Unlock all / Search all vaults by default (where to vote on this feature?)

Hello @0x2a! 👋

I'm sorry that 1Password is causing friction as you and your students perform your important work, I understand the frustration. You can unlock all accounts at the same time by using the same account password for each account, we have a guide here: How to use multiple accounts

The reason why 1Password requires that you unlock each account separately is because each account is encrypted using it's own secret: your account password. If you're using different account passwords for different accounts, or different authentication providers, then you'll need to provide each secret separately.

If you use Touch ID to unlock 1Password then 1Password is able to store the secrets securely in the Secure Enclave (a hardware component on your Mac) so that all accounts can be unlocked at the same time once you provide your fingerprint: Use Touch ID to unlock 1Password on your Mac

That being said, I agree that 1Password can do a better job letting folks know that some accounts are still locked. This is something that our product and design teams are looking into and hopefully improvements can be made in future updates so that we can avoid the sort of productivity loss, and increased cognitive load, that you've described in your post. I've passed your feedback along internally to the teams looking into this.

Thank you for helping us make 1Password better. 💙

-Dave

ref: PB-37864139
ref: dev/core/core#12642
ref: dev/core/core#22174

@1P_Dave appreciate your affirming candor.

The touchID method is partially there. It seems to work if both vault accounts were recently unlocked, but for some reason one of my vaults needs its password more than the other. I wonder if the "require password after" intervals are out of sync, or if I turned on a higher security requirement for one a while ago. The lockout occurs often (a couple times a week), so some requirement has a short interval. One vault is not used as much as the other.

I do recall the use-same-password trick now that you mention it. Some would classify it as ironic design, where two features achieve the opposite user goal -- in this case password diversification vs unification. Sarcastically, that being said the company is called "one" password so there you have it /s. It probably isn't the most enjoyable recommendation for you to make, so I do apologize for necro'ing the workaround.

@0x2a

Thanks for the reply! The "Require password" timer will reset for an account when you use your account password, instead of biometrics, to unlock that account.

for some reason one of my vaults needs its password more than the other

Is this when unlocking the 1Password desktop app or 1Password in the browser? When you say "vault" I'm assuming that you mean account, is it always the same account that requires the account password more often? Can you recall if there's a specific message on the lock screen when you're prompted for your account password for that account?

-Dave

@1P_Dave yes, sorry -- "accounts" is correct here.

From my recollection the experience is mostly consistent between the browser extension (app integration enabled), mac app, or mobile app. Kudos for consistency!

Of the two accounts, A and B, the B account seems to lock itself more. Hrm, some more details between the two...
- B is typically not used on weekends, A is
- B has far fewer credentials in it
- B has two vaults, A has one
- B has 2FA with several yubikeys, A does not
- I've never seen both locked at the same time. When prompted for a password, it usually accepts the A account password, never the B account
- Unless I proactively unlock both accounts and then select "All Accounts", 1Pass seems to select only the last unlocked account for hotkey searches.
- 1Pass seems to lock it's search into the last selected account as well. I experience a feedback-loop here. When I can't find a password from the hotkey search, I usually troubleshoot by opening the 1pass interface (browser, app, mobile), then select the other account to make sure it's unlocked, then search. But the problem is I forget to go back and select "all accounts" on my way out -- setting myself up for more trouble on the next other-account lookup.

When prompted for a password, it's usually account A. I don't remember well enough if both account icons always show up above the password input or not -- I'll try to watch for it next time.

@0x2a

Thank you for the reply. The next time that you're prompted to unlock account B quicker than expected please gather the following information:

1. What the "Require password" setting is currently set to on the affected device.
2. The date that you last entered your account password for that account.
3. The current date (when you're seeing the request for your account password).
4. A screenshot of the lock screen asking for your password.

I'd like to also ask you to generate a diagnostics report from the Mac:

Sending Diagnostics Reports (Mac)

Attach the diagnostics to an email message addressed to support+forum@1password.com.

With your email please include:

• A link to this thread: https://1password.community/discussion/144078/unlock-all-search-all-vaults-by-default-where-to-vote-on-this-feature
• Your forum username: 0x2a
• Please do not post your diagnostic report to the forum. This is for your privacy and security.

Please send the entire file.

You should receive an automated reply from our BitBot assistant with a Support ID number. Please post that number here. Thanks very much!

-Dave