Question

Disabling unlocking with device accross entire company / Forcing global unlocking settings

Forum|Forum|19 days ago
July 28, 2026
4 replies
2 views

When the Unlocking presets were introduced, it slashed the overall security of our company account.

I am unable to force certain settings on users (I would bet I had set the desired settings a few weeks ago somewhere in Policies, but the settings were overridable on user side and now I do not see the settings there at all).

I would especially want to disable opening the app with device, because I know how flimsy users’ device passwords often are. The same goes for Windows Hello (separately from Mac Touch Id), because it encompasses all Face/Fingerprint/PIN, where PIN is often too weak and I don’t see any basic user scrolling all the way down on the help page at https://support.1password.com/windows-hello-security/ and setting a strong PIN because of that.

Will there be enforceable security setting levels per company accounts? Or are there and am I only missing them?

Best Practices

finweAuthor

Ha, I see the submenu under policies now. But I would swear I set the policy and it got reset everywhere to “User can customize”.

The rest of questions, esp. the Windows Hello one, still stands.

1P_Dave

1Password Employee

Hello @finwe! 👋

Thanks for the questions! It sounds like you’ve found them again but for anyone else stumbling on this thread, you can find policies to control device and Windows Hello unlock in 1Password Business here:

Log in to your 1Password account on 1Password.com (in the browser, not the app) using your admin account.
Select Policies in the sidebar.
Select Manage policies on the Authentication policy.
Under Unlock & auto-lock click Enforce specific settings.

Modify the settings you need to change, click Done, and then on the policies page click Save to finish updating the settings. You can read more here.

Note that the “Unlock desktop app with desktop system password” setting is currently only available for macOS and won’t apply to other platforms. To turn off Windows Hello and device unlock you can toggle the “Unlock using biometrics” and “Unlock with device” settings. Make sure that all users are using the latest version of the 1Password for Windows desktop app.

Let me know if that doesn’t work.

-Dave

finweAuthor

Hi, Dave. Yes, I have done this twice and I still don’t see the specific settings enforced.

And now I see why: I have twice missed the self-disappearing light-on-light page-bottom toast “Your changes are pending, save your policy to apply your changes”, which is, dare I say it, low-effort UX on your part.

Oh, it is even mentioned in your howto.

After saving the specific settings AND the policy, I can confirm I cannot change the settings in the app anymore.

So, thanks for the push, I stand by that had this process have a more straightforward UX, esp. not needing to read through an another page of help and a disappearing toast message, It would cause less confusion ad community threads :)

I will get back to you with the Windows Hello settings once I am at a machine with Windows.

Cheers,

MH

1P_Dave

1Password Employee

@finwe

I think that’s definitely valid feedback and I’ve passed it along to our product and design teams! Thank you for sharing your experience here.

-Dave

Sign up

1Password employees: Sign in with SSO

Login to the community

1Password employees: Sign in with SSO