Forum Discussion

wraith's avatar
wraith
Occasional Contributor
3 years ago

Biometric time out

Why do I now need to enter my password every 2 weeks? My phone is as secure as it's going to get (and requires biometric for all use). Meanwhile typing the password once every 2 weeks is a royal pain...
android
1P_Timothy's avatar
1P_Timothy
Icon for Community Manager rankCommunity Manager
3 years ago

Thanks again for everyone's feedback here! After some lengthy discussions internally, our first step in re-examining the lock options when Biometric lock is in use has been to add a 14 day, 30 day and never option for rechecking the account password. This has been included in version 8.9.3 which was released yesterday afternoon and should be available for everyone shortly as the update rolls out. The discussion is continuing internally and there may be some further changes coming in the future. For now, this is all we have to share. As always, your input has been greatly appreciated!

My colleague Ben shared some notes in a thread on the iOS side that I thought were particularly helpful, especially for those newer to 1Password. I really couldn't say it better myself, so quoting:

I'd likely to take the opportunity to highlight:

  1. It is critically important that you memorize your account password and be able to type it. If not, the chances you eventually lose access to your data stored in 1Password skyrocket. Our support team will not be able to assist if this happens. Unlike authentication-based services, because 1Password is end-to-end encrypted; there is no "forgot password" function. If you lose your keys (Secret Key and/or account password) — that's it. Game over. I stress this because most services aren't end-to-end encrypted and as such people are accustom to being able to forget their passwords, plug in their email address, and get a new password. It does not work that way with 1Password.

  2. The Emergency Kit can help. We recommend printing this document, and writing your account password on it. Then store the completed document in a safe place. The Emergency Kit will not help if you haven't written your account password on it and kept it up to date. The Secret Key alone is not enough to access your account. Both are required to access your account.

  3. Implement a recovery plan for your family (or team). Account recovery can be performed by a Family Organizer or business administrator. We would strongly encourage you to have multiple people with these roles if you are part of a family/business membership. If you are the only Family Organizer for your family, and you forget your account password, not only does that put you in a tight spot, it puts your whole family in a tight spot.