1Password 8: account password required every 2 weeks?

Any update on this? This new feature is such a PITA, and for whatever reasons seems way more frequent than 2 weeks.

Users should have the option to opt out or in to these kind of QoL features. Everyone has their own unique level of security requirements, and this may vary by vault even.

It’s even more horrid seeing as not only do you have to enter the master password every two weeks, if the prompt appears when using Safari AutoFill (my primary use for 1P), you then have to manually open the 1Password app and enter it there too, otherwise it will continue prompting for the password every time.

I get that this is a limitation of apple’s AutoFill API, but surely there’s a better solution to this, at least the aforementioned timeout sync and additional grace period that would hopefully minimise the chances of having to enter the MP on mobile at all.

Echoing @sectwykr thoughts entirely. I have multiple team accounts for my clients, having to re-enter my password, which is long convoluted and secure, into all my devices every two weeks is a horrid experience. I love with 1Password since almost day 1, and never had an issue with remembering the master password... why now? Please give us the option to turn this off, you are costing us time and creating frustration. Not productive.

Today another 2 weeks seems to have passed and I was forced to enter my master password again while I was trying to use autofill in the German DHL app.
What I then did was open the 1Password App and enter my MP there. However this does not seem to have unlocked autofill in the app, i.e. I am still asked to enter my MP there.
Is this intended to work that way or is this a bug?

I'd also like to add a big +1 to the situation where you have more than one 1P account. I've used 1P for years, and convinced the company where I work a few years back on using it too - so I'm logged into 2 separate 1Password accounts constantly (primary: personal, secondary: work).

With 1Pv8, now when I'm forced to re-auth (with my strong but memorable passphrase) every 2 weeks - it's a real pain especially on mobile, but I cope.

However, what really bothers me is that I'm never prompted to log back into the 2nd (work) account. Instead, I'm forced to go through a convoluted process to get it unlocked (have to use the program menus, select Accounts, then select "Sign in to another account", then go to "Sign in on 1Password.com" for some reason, then click on a web link that takes me back to the app (???), then finally I get to authenticate). I don't even bother to try that on my mobile device anymore, which as everyone noted can be a pain for other reasons.

I seriously hope at least the latter issue can be addressed - and agree that the "until reboot" option, at the very least, should be given to the users - rather than force-treating everyone as being incapable of remembering their master password :)

The world (Apple and Google) is going into a direction where passwords are not needed. A password manager should be a thing that lets me stop thinking and worrying about passwords. Master password should be very strong, if I'm forced to enter it then I have to remember it or keep it on a paper that I'm carrying with me everywhere, another solution is to have a weak master password. It defeats the purpose of having a password manager in the first place.

1P_Ben It doesn't solve all case. If you are primary working on MacOS, use Touch ID every day and then, at the end of the 2 weeks window go out and need to access 1Password on your iOS device. You still have a chance that 1Password would require you to manually provide the password on iOS. Which isn't great. It's still a step in the good direction. You could had logic that would know if the user is using both MacOS and iOS, then only ask the password on MacOS in the 2 weeks windows and allow a 4 weeks window on iOS. You would have more chance to input your password only on MacOS, when not in a rush on iOS. Or just allow a window of 4 weeks across all devices. At least we would have to input it 12 times in a year and not 26 times. Thanks.

Just chiming in to say that I hope the suggestion of synchronising the reset period and extending the period to three weeks on mobile is considered as having to enter the MP on mobile defeats the entire purpose of AutoFill, especially seeing as the device is already secured with a password and biometrics.

Thanks

I think the idea that this every two week system will assure that people know their master password isn't really well thought out. This feature is particularly annoying when running with two accounts, because they both lock out at the same time. Luckily I can look up both on my phone and (continuity) copy/paste, but I would prefer a single unlock password like we used to have with 1Pass7. Maybe Yubikey or "authenticate on authorized device" type system would work too.

I doing my yearly research on password managers and stumbled over this thread.
My suggestion: Just make an option „Never ask for master password“ and let the user double opt it.