Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
Former Member
4 years agoFeature request: Secondary 1Password login
I'd like to put in a request to have a second way of logging into a separate vault from the 1Password login screen. Slightly similar to the "fake master password" suggestion, but not. I'll explain my...
Ryan_Parman
4 years agoDedicated Contributor
I'm extremely salty about the removal of iCloud syncing (and I say that as a happy multi-year subscriber of 1Password for Families). The staunch unwillingness of the company to reconsider this regression in the face of widespread customer feedback to the contrary is very frustrating to me as a user who is adept at technology changes.
If this regression is going to persist, then the Emergency Kit PDF stored in iCloud drive is probably the best alternate-but-not-as-good solution for getting back into an existing account on a new device.
Now, for the next problem on this topic — the human mind.
The human mind is the wrong tool to use for generating and/or storing passwords. In this day and age, security on the internet requires lots of randomness and uniqueness, while the human mind is far more comfortable with patterns and coalescing similar things together. As such, the only way to become reliably secure online is to remove the human mind from as much of the authentication equation as possible.
I used to be able to have a simpler password for getting into local devices (something I was required to remember; “minimum viable memory”) and a dramatically more complex password for the web-facing 1Password.com (long, complex, unique). Now that they have to be the same (because of the removal of non-1P.com vaults), I've had to find a mid-way spot between the two levels of complexity with something that I can remember + is sufficiently complex.
While Mac-based Touch ID and Apple Watch integration help with local authentication, they're not perfect (e.g., when Apple Watch goes into sleep focus after 10pm). While it's solvable by re-typing the password manually by memory, or using a static password stored on a YubiKey, it's still one more thing that makes the lack of non-1P.com vaults that much more frustrating to use.
But it's easy to talk about myself, a person who is highly technical and experienced in cybersecurity. What's much more difficult is teaching my children, spouse, friends, and family how to take advantage of this product successfully without having my mom set her (now, web-facing) password to "hamburg3r" because it's the only thing she can manage to remember. Or my daughter with autism who also has limits in the complexity of passwords that she's capable of remembering for the one password she needs to be able to remember.
Whereas the cybersecurity industry at-large has failed spectacularly at educating multiple generations of internet users, I'm asking you guys (who provide the best credential management software out there) to help some of us succeed in teaching and educating non-savvy users, so that we can help elevate their security posture that much more. Allow us to leverage a quality product, paired with UX psychology, applied with better education for the next (and perhaps some of the current) generations of internet users. Bring back some of the things that were removed in 1P8. Please. Empower me to be as successful in teaching others better password/authentication habits for the internet in 2022 with 1P8 as I was with 1P7.
P.S.: Insight into the psychological angle of user-experience design, as it pertains to this specific issue:
- https://www.encyclopedia.com/social-sciences/applied-and-social-sciences-magazines/revolution-rising-expectations
- https://en.wikipedia.org/wiki/Who_Moved_My_Cheese%3F