Forum Discussion
Browser req pw always, instead of using biometric & windows hellow
Hello mgrobins and TataruTaru! 👋
I'm sorry that you're being prompted for your account password more often than expected. So that I can better understand the situation can you tell me the following:
- When you're asked for your account password in the browser, can you still unlock the 1Password desktop app using Windows Hello? Or does that also prompt you for your account password?
- Do you have the "Use the Trusted Platform Module with Windows Hello" option turned on in the desktop app's settings: Manage your settings
- Do you have TPM 2.0 enabled: Enable TPM 2.0 on your PC
- Are you using the beta MSIX installer? Or the EXE installer?
I look forward to hearing from you.
-Dave
- mgrobins2 months agoNew Contributor
Good day Dave,
I have done more testing following Tataru's outcomes. I now have a functional setup.
1. Clear TPM and re-register it.2. Uninstall Beta and reinstall standard channel for windowsx64.
NOTE: I changed to MSIX to try and fix this issue.
3. Tested TPM and it reports:
AMD version 6.32.0.6, specification 2.0
PPI Spec v1.3, TPM Spec sub-version 1.59 (Thurs Jun 18 2020), PC Client spec version 1.05.
Attestation and storage= ready.
When I load the 1pw app or browser extension I am now asked for the PW once, and the biometric check for fingerprint is shown. Then on reboot it only asks for biometric.
I can't offer advice on what has changed.
I did make another system change: Under Device Security I enabled "Local Security Authority Protection" (both it and core isolation were disabled due to an unrelated driver).
I hope this helps identify the cause because this did arise out of nowhere and it still seems it's an issue on MSIX unless the act of reinstallation was the fix. I'll reinstall MSIX at some near time and see. - mgrobins2 months agoNew Contributor
Sorry - forgot to answer your points in number.
1. No it requires Password.
2. Yes, I have the TPM option activated.
3. Yes TPM is enabled in bios and my windows hello is functioning therefore I presume windows sees it.
4. I was using the normal release, and am now trying the beta release to see if it helped. Same problem for both (I don't know what you mean by MSIX... is that your current Beta or MS App store?). - mgrobins2 months agoNew Contributor
Dave, I am the individual who initiated the thread and I appreciate your input so far - as well as Tataru who has the same problems I have had.
I am prompted for both the app and the extensions. 100% of the time - not "more often than expected".
I have tried every combination of system changes I Can manage to no effect. I'm currently even trying the Beta strain of 1PW and that makes no difference.1Password for Windows 8.10.78
81078039, on BETA channel
I was on the standard release when I wrote this bug report.
Windows hello is active. My fingerprint reader functions for logging me into windows. 1PW is simply not working with my TPM it seems. - TataruTaru2 months agoDedicated Contributor
Issue
Every time I start my PC and open the 1Password desktop app, it asks for my master password before showing the Windows Hello prompt. This occurs after every reboot or system start, even though Windows Hello is enabled and working normally elsewhere.
My Current Configuration
- TPM 2.0 is enabled, activated, and owned.
- Windows Hello (PIN login) works without issue on Windows login.
- 1Password's "Use the Trusted Platform Module with Windows Hello" setting is enabled.
- I’m using the MSIX version of 1Password (from the BETA).
Troubleshooting Steps Taken
- Checked TPM Status:Get-WmiObject -Namespace "Root\CIMV2\Security\MicrosoftTPM" -Class Win32_TPMOutput:
- IsActivated_InitialValue: True
- IsEnabled_InitialValue: True
- IsOwned_InitialValue: True
- Reviewed diagnostic logs:
- Error: Failed to authenticate via Windows Hello: Error code 0x80090014
- Message: TPM access error or key mismatch
- Log line: Could not get key from unlocked account!
- Tried the following:
- Uninstalled 1Password and deleted all local app data
- Removed the browser extension
- Reinstalled both the MSIX and MSI versions
- Issue persisted across all reinstall attempts
- TPM Reset Test:
- Booted into BIOS
- Turned TPM off, rebooted, then turned it on again
- Switched to EXE Version:
- Installed the standalone EXE version from 1Password’s website
- Windows Hello worked immediately after reboot — no master password required
Final Outcome
- The MSIX version consistently asks for the master password after a reboot and does not reliably use Windows Hello to unlock directly.
- The EXE version, after TPM reset, works as expected and unlocks using Windows Hello even after a full system restart.
- I’ve decided to stick with the EXE version for now, as it offers stable Windows Hello support on boot.
(Post was re-written to cut down on the rambling)- 1P_Dave2 months ago
Moderator
Thank you for helping us to test the MSIX beta and for the detailed information! I can confirm that you're running into a known issue with the MSIX version of 1Password for Windows that our development team is currently investigating. For the time being being, using the EXE version is the best workaround since it isn't affected by the issue.
I'm sorry for the inconvenience.
-Dave
#37637