After master password change on other device, able to view vault before reauthenticating on app

Hi @TurnerBurn, thanks for writing in with this question.

If a device is lost or stolen we recommend regenerating your Secret Key and deauthorizing the device. Deauthorizing a device will automatically sign the account out of the 1Password app. If 1Password is unlocked on your device when you change your password, the app won't lock automatically or sign the account out like deauthorizing.

You can deauthorize devices from your account on 1Password.com by clicking your name > My Profile then clicking the gear icon next to a device and selecting "Deauthorize Device".

You can also set 1Password for Android to lock automatically anytime you switch focus away from the app to reduce the likelihood that anyone who picks up your phone might find an active session, with or without the password change:
1. Open and unlock 1Password for Android.
2. Tap the account or collection icon.
3. Tap Settings > Security.
4. Tap Auto-Lock on Exit
5. Select Immediately.

Let me know if there's anything I can help with!