Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
AlmoEnd
3 years agoDedicated Contributor
Continuous reprompt Windows Hello
They prompt reads: "You need to enter your account password before you can use Windows hello" but it seems to me that this shouldn't pop up every single time I launch the last pass excuse me one pass...
AlmoEnd
3 years agoDedicated Contributor
Very in-depth answer, Former Member and very much appreciated! I have been using Smart Cards for at least 15 years, and I understand the "risk relationship" in the equation of "something you have/know/are". That said, since I've been a Windows user for a loooong time, I'm not clear on whether WebAuthn and the whole passwordless push is an attempt to get us lemmings to the edge of the cliff.
So leaving my Smart Card (or Yubikey) in my machine while a bevy of kids with candy-smeared fingers descend on my laptop when my PIN spells my name is definitely an accident waiting to happen!
I am describing a "use case" as a new user to 1Password (refugee from Lastpass) that does make the learning curve steeper (confusing wording in the prompts while you set up the overall security of your "risk-rich" system (a password/credential vault).
Also, as a lifelong Infosec professional, I'm fascinated with Reddit threads like this one, especially when I am planning to use Yubikeys to protect my 1Password real estate. I don't want Windows Hello to provide a "shortcut" around the Yubikey, and I don't trust the "all eggs in a single basket" approach of using 1Password as a TOTP generator, unless I can be 100% certain my Yubikey can be required before issuing the OTP from 1Password.
Hoping this ramble makes some sense, and comes close to addressing the points in the well-worded reply by Former Member.