Why is 2FA so frustrating in 1PW 8/ Family Membership?

Pardon my frustration above, but I really _want _ to keep 2FA on but it's just become so difficult. Isn't 1Password support to create cookie when 2FA is authenticated on a specific browser and not ask again until logging in from a different browser or unrecognized computer/device? Is there a time period expiring where the 2FA cookie expires? Am I misunderstanding all of this?

That's how other sites work.

1. Unrecognized device.
2. Product asks for 2FA code
3. Cookie created
4. Log in again to 1PW
5. 1PW recognizes it's a known device and lets you in
6. Log in from unrecognized device > asks for 2FA

@mia I have not experience of the Cisco Duo app, but TOTP authenticator apps and hardware security keys behave the way you would expect. That is, you should only have to provide your second factor once per device.
Are you inadvertently deleting cookies? Have you tried an alternative authenticator app?

I tried logging again just now and it asked me for OTP again :-(

Former Member I use Cookiebro for Chrome which was my first thought, but I've ruled that out for the following reasons:

1) I've whitelisted all of 1PW's cookies already
2) No "unwanted" or blocked cookies detected while logging into the 1PW site.
3) I believe I saw this on another computer without CookieBro.

I haven't tried any other OTP. I tried Authy but it wouldn't let me sign up unfortunately/ "NOTICE: Multi-device disabled"

Questions:
Is there a 'timeout' for the OTP or is it a permanent per device until reset?
What other reliable OTP apps are there? Duo, Authy and 1PW are the only ones I know of. Google Authenticator is terrible, I wouldn't touch it.

@mia I'm assuming you have the 1Password browser extension installed. I would try disabling all other extensions temporarily to see if that makes any difference.
Authy is my preferred authenticator app. That error message means that there is already an Authy account associated with the phone number you gave and that it is currently set to not allow new devices to be added. I'm not sure I would recommend it at this point, but you can recover access to that Authy account by following these instructions:

https://support.authy.com/hc/en-us/articles/115012672088-Restoring-Authy-Access-on-a-New-Lost-or-Inaccessible-Phone

There is no time-out for 1Password 2FA. It is permanent per device until the app is reset, a browser cookie is deleted, the device is deauthorized or the 2FA is reset in your 1Password profile.
Google Authenticator is not a safe option because losing or resetting your phone results in the loss of your 2FA tokens. I wouldn't use Microsoft Authenticator because someone with access to your Microsoft account can recover all your 2FA tokens. If you're on Android, Aegis is a good option. If not, do you have another phone number you could use to set-up Authy?

You read my mind! I requested a security review of my Authy and asked for deletion. It’s crazy someone can do this with just your phone and email :-/ but I guess it’s there for people like me. Lol

I am going to take your advice about the browser extensions.

Still waiting for Authy. I'm on step 3 of 4 to get account reinstated.

Hi @mia, I'm sorry to hear of these troubles with 1Password and your 2FA. I understand you're still waiting on that Authy account process to complete, but if there's anything we can do to troubleshoot as you go forward, we're happy to. If you send a short email with a link to this discussion to support@1Password.com, we can connect you with some of our specialists who work on the more tricky 2FA issues. I hope this is helpful to you! 👍

@1P_PeterG I haven't heard back from Authy about the final stage of my Authy reset, but I will plan to re-do my 2FA with 1PW tonight and see if the issue keeps happening.

Sure thing, @mia! We'll be here should you need us 😀

Resigned up with Authy. Issue is still happening. Confirmed Cookie Bro is not blocking any cookies while logging in and all of 1PW's domains have been whitelisted. I am going to try and find a pattern.

EDIT: I've narrowed this down. It's something in my (portable) chrome install. There's a setting somewhere that seems to be wiping passwords on exit. I downloaded a fresh portable copy and it doesn't do it.

Now to find the offending setting.