Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
cobaltjacket
2 years agoFrequent Contributor
Feature request: Hardware lock individual vaults
I would like to create a vault that is locked to my hardware (FIDO2) keys. That is, separate from the app login, if I try to access this vault, I should get prompted for my YubiKey.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided
1 Reply
- 1P_Dave
Moderator
Hello cobaltjacket! 👋
Thank you for the suggestion! 1Password uses security keys for two-factor authentication however the security of your vaults is primary based on encryption, not authentication. You can read more here:
When 1Password is locked, your account password is required to unlock the app because it is the secret that decrypts the items in your vaults. Requiring a security key to access certain vaults after you've already unlocked 1Password could arguable be a form of "security theatre" since that vault's information would already have been decrypted when you entered your account password and an attacker would just need to locate that decrypted information on your device rather than providing a security key to access the vault in the app.
Can you tell me a little more about why you'd like to see such a feature? Let me know if I misunderstood the suggestion.
-Dave