Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
Continuous reprompt Windows Hello
They prompt reads: "You need to enter your account password before you can use Windows hello" but it seems to me that this shouldn't pop up every single time I launch the last pass excuse me one pass...
I guess I thought a little deeper: "Would I want somebody to be able to log on to my Windows 10+ PC with only a (potentially stolen) Yubikey in their hand. Even if it was just a second factor, PIN (relatively easy to steal) plus key == access. NOT good.
However, I have a key set up as a second factor, as outlined in this support article, but the TPM 2.0 message received when setting it up is a little confusing or maybe "frightening" is a better word. That is, it bespeaks something like: "if anybody else can use Hello on your computer to log in as you, then they will have full access to your Vault" which makes (to me) zero sense.
I thought TPM was on by default with BitLocker. But the second factor seems to only come in play when installing on a new device or browser? At the moment, the device is unlocking using Hello correctly when the 10 minute timeout occurs, but not after reboot or logout? Is this behavior by design? If so I would suggest the prompt be reworded differently than "before you can use Windows Hello with 1Password".
