Forum Discussion

Former Member's avatar
Former Member
4 years ago

1pw8 not needing to be unlocked to input a user and pass?

I just updated to 1pass 8 on my pixel4a5g running android 12 on the july security patch and in using 1pass the autofill is not asking me to log into 1 pass like it did with 1pass 7. I set 1pass 8 to auto lock immediately after closing the app, thinking that it would also require me to use my fingerprint or master password to select my user and pass for an app or a website login, but it did not. I thought that maybe it was an issue with something in the cache so i force stopped the app, cleared the cache and had the same problem. this is a huge security hole and needs to be fixed. i shouldnt have to go back and forth from the app to copy a password and then go back to the app where i need it. it should work the same as it did in version 7, where you need to log in with a fingerprint or master password before getting the stored login credentials, at least that's what i would have thought. is this something that isnt working as intended or is this supposed to work this way? if this is not working as intended then how long will it take to get fixed? if this is working as intended, why? the whole reason apps like this is to help things be more secure then how does this functionality support that. for the moment i have reverted back to 1pw7.


1Password Version: 8
Extension Version: na
OS Version: android 12
Browser:_ na

24 Replies

  • Former Member's avatar
    Former Member

    it seems counter intuitive that login information is being shows while 1pass is locked. why was it designed to show that way?

  • 1P_Timothy's avatar
    1P_Timothy
    Icon for Community Manager rankCommunity Manager

    Hello @hawklet00 thanks very much for including the screenshots and I apologize for the delay in response.

    The behavior you've described in both scenarios is expected assuming that after you tap a suggested item in scenario 2 you are prompted to enter your password or biometrics (if 1Password is locked). The Show filling suggestions setting works similarly to the Autofill previews section in 1Password 7 for Android. Both reveal the name and username of any item linked to the website or app after tapping a sign-in field. If you prefer this information to be revealed only after unlocking 1Password you can turn Show filling suggestions off.

    Let us know if we can help with anything else!

  • Former Member's avatar
    Former Member

    thanks for following up, here is what i found:

    Scenario 1: when toggling the show filling suggestions to off when i tap on a user or pw field, i am prompted to unlock 1pw
    Scenario 2: when toggling the show filling suggestions to on i am not prompted to unlock 1pw to see my user and pass

    I've attached screenshots to this thread to show both scenarios so you can see what i am seeing, the first is scenario 1 and the second is scenario 2

  • 1P_Timothy's avatar
    1P_Timothy
    Icon for Community Manager rankCommunity Manager

    Hello @hawklet00, thanks for letting us know about the issue you've seen with 1Password 8 on your device.

    With Auto-Lock on Exit set to Immediately, 1Password 8 should lock any time you switch focus away from 1Password or lock your device. If you have Show filling suggestions on, you will see linked suggestions after tapping a login field but filling them should require you to unlock 1Password 8.

    If that's not the case for you, I'd like to ask you to try the following to help give us a better idea where the issue may lie:
    1. Open and unlock 1Password 8.
    2. Tap Settings > Security.
    3. Confirm Auto-Lock on Exit is set to Immediately.
    4. Return to 1Password's home screen.
    5. Tap your account icon > Lock.
    6. Open a website and tap the filling suggestion.

    After tapping the suggested Login are you required to unlock 1Password? If you turn Show filling suggestions off from Settings > Autofill then repeat steps 4-6 do you see the same behavior? Thanks again!