It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
1Password on Work machines - risks from admin resetting passwords (Windows Hello)
If I install 1Password on a work machine and use Windows Hello for entry. Later when I return a laptop and forget to remove 1Password - what is the risk that the company admin could reset the account...
Windows Hello is reset and PIN/saved credentials within Windows are invalidated if an admin resets the Windows account password. This is not the case if the user changes his password himself, but it is the case if an admin resets the password.
This is because any Windows-saved credentials are encrypted with the Windows account password in some Windows secure storage, so to carry over to a new account password, the existing account password is required to decrypt the saved credentials, then re-encrypt with the new password. Since the admin just overwrites a password without knowing the previous, saved credentials such as the Hello Pin cannot survive such a reset. This is a Windows mechanism and has nothing to do with 1Password.
