I am confused on the Two factor authentication. 1Password gave me steps to scan in a QR code to set it up but I can't even access it to use it on my phone now. I found an app for Google Authenticator, but I don't have it installed and will have to go through another mess of codes to get it installed. I went to my Google Account and it has no mention of 1Password and only mentions the Google password manager. What got set-up on my phone with the QR code? How do I find it to use it? I was expecting to use text message authentication in combination with password for the two factor authentication since I only access my 1password account on my PC. 1Password Version: Not Provided Extension Version: Not Provided OS Version: Not Provided

jeffer23 1Password does not support two factor authentication via SMS text. I think this is a good thing as it can easily be compromised by signalling system 7 and SIM swapping attacks. Google Authenticator is a standalone app and is not tied to your Google account. Your two factor authentication secrets are only stored on your phone. So if you lose your phone or factory reset it then you lose the two factor authentication codes. Any authenticator app compliant with the Time-based One Time Passcode standard will work with 1Password's two factor authentication. Install the app on your phone, open the app, scan the 1Password QR code and the enter the 6 digit passcode into the 1Password website. https://support.1password.com/two-factor-authentication/ A number of these authenticator apps allow you to backup your 2FA secrets. In my opinion, Authy is the easiest to use for most people. It encrypts your 2FA secrets with a key derived fom your backups password and saves them in the cloud. Keep a separate record of your backups password and you will always be able to recover your 2FA passcodes.

Is this where I post for support? It looks like I am at an endpoint and may have to cancel my account before the trial period ends. I am stuck in la la land. I setup my account on Home Computer and Work Computer. All was working okay on the configuration side. I then decided to set up Two-factor communications. I have no idea how it got setup through my phone. I remember 1password showing me a QR code. It seems like I couldn't find any app and went to the camera to see if it would recognize the code. I some how got a code and entered it in 1password. 1password sent me an email saying my account is now protected by two-factor authentication. Now when I try to go to the site it wants my 6 digit pin. I get no notification from my phone that a request has been made. I don't see in the 1password software that I can get a new QR code. I have went through my phone and find no authenticator. I found an internet list of the Top 10 authenticators and none of them are loaded on my phone. I couldn't find that Verizon, Samsung, or Google contained one in their apps on my phone. I have now installed Google Authenticator, but it wants a QR code which isn't available from 1password. I might as well delete my account before I get charged at this point unless there is some easy way out. How does 1password handle this if you lose your phone or it fails? What good is a key if the weakest link destroys the process?

You can also use the App Authy for 2FA. But how you scanned the QR Code for the 2FA activation? If i understand you right, you didn't used a Authentication app?

jeffer23 You must have used an authenticator app or Apple keychain to scan the QR code and generate the 6 digit passcode required to enable two factor authenticaiton. If you can't find the 6 digit passcode in an authenticator app or Apple keychain then you'll need to disable two factor authentication. You can disable two factor authentication from any 1Password app where you are logged-in. If you are not logged in to a 1Password app then try logging-in to 1password.com from a browser where you have logged in before. If all that fails then send an email to mailto:support@1password.com from the email address you use for 1Password explaining the problem. They will ask you some security questions and disable two factor authentication for you. Before enabling again, consider whether you need two factor authentication. The combination of account password and secret key already gives your 1Password account very strong protection. If you decide that you still want to enable it then choose an authenticator app that backs-up your two factor authentication secrets. I wouldn't recommend Google Authenticator because you lose your two factor authentication passcodes if you lose or factory reset your phone.

Thanks for your reply and help. I will reread your post later today when I get opportunity to attempt a solution. At this moment I really only 100% want two factor authentication for my work computer (laptop). This is a laptop that I do not own. It is also used for occasional travel. If something ever occurred where I lost control of this laptop, it would be good to have peace of mind that the logon can't be done without use of my cell phone in addition to a password. Right now I think I am overwhelmed with the process of getting all of my data into the configuration. So I probably don't have a proper feeling for long term use of the feature. Once I get most of my passwords and data entered the process will likely be less stressful since I also do programming (on my daily job - with overtime) which combines to cause mind fatigue when adding new stuff I don't know well. Thanks again for the advice.

Authenticator App | 1Password Community

13 Replies

vealpool
Dedicated Contributor
4 years ago
You can also use the App Authy for 2FA.

But how you scanned the QR Code for the 2FA activation?
If i understand you right, you didn't used a Authentication app?
jeffer23
Occasional Contributor
4 years ago
Is this where I post for support?

It looks like I am at an endpoint and may have to cancel my account before the trial period ends. I am stuck in la la land.
I setup my account on Home Computer and Work Computer. All was working okay on the configuration side. I then decided to set up Two-factor communications. I have no idea how it got setup through my phone. I remember 1password showing me a QR code. It seems like I couldn't find any app and went to the camera to see if it would recognize the code. I some how got a code and entered it in 1password. 1password sent me an email saying my account is now protected by two-factor authentication. Now when I try to go to the site it wants my 6 digit pin. I get no notification from my phone that a request has been made. I don't see in the 1password software that I can get a new QR code.

I have went through my phone and find no authenticator. I found an internet list of the Top 10 authenticators and none of them are loaded on my phone. I couldn't find that Verizon, Samsung, or Google contained one in their apps on my phone.

I have now installed Google Authenticator, but it wants a QR code which isn't available from 1password. I might as well delete my account before I get charged at this point unless there is some easy way out. How does 1password handle this if you lose your phone or it fails? What good is a key if the weakest link destroys the process?
Former Member
4 years ago
jeffer23 1Password does not support two factor authentication via SMS text. I think this is a good thing as it can easily be compromised by signalling system 7 and SIM swapping attacks.

Google Authenticator is a standalone app and is not tied to your Google account. Your two factor authentication secrets are only stored on your phone. So if you lose your phone or factory reset it then you lose the two factor authentication codes.

Any authenticator app compliant with the Time-based One Time Passcode standard will work with 1Password's two factor authentication. Install the app on your phone, open the app, scan the 1Password QR code and the enter the 6 digit passcode into the 1Password website.

https://support.1password.com/two-factor-authentication/

A number of these authenticator apps allow you to backup your 2FA secrets. In my opinion, Authy is the easiest to use for most people. It encrypts your 2FA secrets with a key derived fom your backups password and saves them in the cloud. Keep a separate record of your backups password and you will always be able to recover your 2FA passcodes.

Forum Discussion

Authenticator App

13 Replies

Featured discussions

September at 1Password: Browser versions, enhanced security, and new integrations

Recent discussions

1Password Webauthn/Passkey attestation?

Alphabetical sorting of tags

Please update the Windows Tray Icon

Lost Password Refresher

cryptpad and document-specific passwords