Forum Discussion

EyXU's avatar
EyXU
New Contributor
3 months ago

Feature Request - Password for 2FA/OTP

Hello 1Password team and everyone else!

I searched the forum but didn't find anything similar: apologies if this has already been requested.

I would like to request the option to add a second master-password or something similar for the 2FA passwords stored in 1Password.

This would provide more security in the way that even if someone had a persons Master-password they would not immediately be able to bypass all means of security. Especially since the 2FA storage is a logical and somewhat incentivized feature. Therefore it would only make sense to add another layer of security as to not "put even more eggs into one basket".

Thanks for your consideration

feature request

1 Reply

  • 1P_Dave's avatar
    1P_Dave
    Icon for Moderator rankModerator
    16 days ago

    Hello EyXU​! 👋

    Thanks for the feedback! I'm curious to learn more about the threat model here where an attacker would learn your account password but not a second password for your 2FA one-time passwords. If an attacker were to compromise your device and obtain your account password using something like a keylogger then would they not also obtain the second password using the same method?

    Outside of your device, an attacker would already need to have your Secret Key in addition to your account password to access your account. And you can further protect your account using 2FA: Turn on two-factor authentication for your 1Password account

    I look forward to hearing from you.

     -Dave