Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
XIII
4 years agoSuper Contributor
Does 1Password / Windows Hello require a TPM chip and/or biometric authentication?
On my (10+ years old...) Windows 10 PC I need to type my 1Password account password whenever I want to access 1Password 8. I thought my PC was too old to support Windows Hello and I don't think the m...
GreyM1P
1Password Team
4 years agoXIII – I can't really comment on the internal workings of Windows Hello, so I would take the cautious approach. If you're not sure about its features or security, I'd probably suggest not using it.
We provide a quick overview of the security of Windows Hello (from a 1Password perspective) here:
☞ About Windows Hello security in 1Password for Windows
Considering we recommend using an alphanumeric PIN with Windows Hello anyway, perhaps the middle ground here is to change your 1Password account password to something that's easier to enter. We'd recommend four words, generated using the password generator.
☞ How to choose a good 1Password account password
You don't need to have uppercase letters, numbers, or symbols in your 1Password account password, and it's generally easier to enter actual words than random passwords, so there's no fiddling with the Shift key or wondering where a particular symbol is on a particular system's keyboard.
We never store your 1Password account password in RAM, on disk, or even in the TPM's secure storage – a single-purpose secret is generated when you use Windows Hello and 1Password checks for that secret coming back from Windows Hello instead.
If the PC in question is already somewhere secure, and you aren't worried about anyone seeing the PIN you enter, you can choose a 4-number PIN if you want. The main thing is to balance how credible the threat of being shoulder-surfed is with how convenient the unlock method is.