1P master PW *before* you can use Windows Hello??

Hi AlmoEnd, thanks for getting back to me!

I don't exactly know if I'm making myself clear but why would I have to enter both the master password and present my windows Hello auth method, whether this is the 1st open of the safe or 1001st?

1Password should only request your account password followed by Windows Hello under the conditions I had previously mentioned. In the absence of any of these conditions, you should be able to unlock with Hello only. If the behaviour you're seeing doesn't line up with this, let me know, as it's possible that something is going wrong for you.

The behaviour where you're required to enter both is essentially a setup process. When you provide 1Password with your account password, an unlock key is created from a combination of your Secret Key and account password. This key is stored on your system, either temporarily or in the TPM, and you then provide Windows Hello permission to use this key to unlock 1Password.

In certain circumstances, for example after restarting your device (if the TPM option isn't enabled), 1Password will abandon this key to protect it from unauthorized access, and this is when you'll see the setup process again to recreate the key.

And why do I have to hit OK after it recognizes my face or I type in the correct PIN? Other software just "goes" without the OK prompt.

I'm sorry I had previously missed this question! The Windows Hello dialog itself and the requirement for a confirmation OK click is controlled by Microsoft, and we're not able to make any changes to it. The way Windows Hello interacts with non-native apps, such as 1Password, is entirely different to how it interacts with Windows itself and any Universal Windows Platform (UWP) apps, as they're held to different sets of rules.

If you'd like to see any changes made here, I would recommend sending feedback to Microsoft with the Feedback Hub app.

If you have any further questions or concerns, let me know!