Feature Request: Unlock 1Password for iOS using a custom PIN and not the device passcode

Is it on the roadmap to give us the option to select our own 4-6 digit passcode [pin] instead of using the same passcode that unlocks the iPhone? This seems like a security risk because if someone is able to observe us unlock our phone they potentially have access to our whole lives. I prefer the 1Password7 option where we could define the PIN instead of being relegated to the device pin.

@mvasilakis

If you choose to enable the feature, 1Password 8 supports using your device PIN to unlock the app. If you do enable this option then you should choose a strong passcode that is difficult to guess or view. For those concerned with security, you can enable Face ID / Touch ID unlock rather than using the device PIN:

• Use Touch ID to unlock 1Password on your iPhone or iPad
• Use Face ID to unlock 1Password on your iPhone or iPad Pro

Alternatively, you can choose to unlock 1Password using your account password which you can change to be easier to type in while still being strong and unique: How to choose a good 1Password account password

-Dave

ref: PB-33332220

Over the years I’ve come to trust allot of info to 1Password and therefore the info in 1password is way too important to trust to a device pin. For 1password I prefer a pin unique to the app. Preferably requiring a password every few days. Also I’m not comfortable shortening my password for comfort sake. 1password is about security and while some folks might be ok with comfort and reduced security, I am not.

While Face ID has gotten better I’m still not comfortable with it unlocking financial website info. If it were the passwords to a few websites I wouldn’t care. But in my case the stakes are larger and a 6 digit pin that unlocks my phone is just too unsafe.

@mvasilakis

To be clear: I'm not suggesting that you choose a password that reduces security. However, it's possible to choose a password that is easier to type in while still being secure and unique as explained in the guide that I linked to above. It's also important to remember that your data is not just protected by your account password but by your Secret Key as well: About your Secret Key

You can also choose a device PIN that is longer than 6 digits by choosing "Custom Alphanumeric Code" in your iPhone's settings: Set a passcode on iPhone - Apple Support (CA)

That all being said, I've passed along your feedback to the Product team.

-Dave

ref: PB-33332220

I agree. We should have the ability to use a different PIN for 1password from the device/iPhone PIN. This backward step of functionality from 1password 7 is extremely dissapointing and disheartening. Especially from a long long term user.

I can’t understand the thought process on this. Security is surely at front and centre of your minds and business. This doesn’t make sense.

Please fix this. Please. And please educate me as to why I am wrong. Thankyou kindly 1password team.

@pete16

I'm not on the product team myself but I believe that one of the major motivators was that, in the old days of 1Password 7, we saw a lot of folks permanently lock themselves out of their 1Password accounts or vaults because they believed that the "custom PIN" that they had set for 1Password was actually their account password. Then, when they needed to setup 1Password on a new device, they no longer remembered their actual account password and were locked out.

At the moment you can unlock 1Password for iOS using three different options:

1. Your account password, which can be made easier to type in while still being secure: How to choose a good 1Password account password
2. Face ID or Touch ID.
3. Your device PIN which can be made longer and more complex than just the default 4-6 digits: Set a passcode on iPhone - Apple Support (CA)

Can you tell me a little more about why none of these options would work for your use case? What specific threat are you trying to protect against where none of these options would be an acceptable path forward? I would be happy to pass along your reply to the product team. 🙂

-Dave

ref: PB-33499680

Dear 1Password team,
I trust this message finds you all in good health.

I would like to formally request the addition of a separate Pin Code feature in 1Password 8, separate from the device PIN Code. This particular functionality was available in 1Password 7.

While it is true that 1Password 8 has introduced Pin code support, it is currently limited to the device's PIN code. In contrast, 1Password 7 allowed users to set a different Pin code for enhanced security purposes.

Thank you for your attention to this matter.
Best regards,
Munoo Chahar

Hello @munoo! 👋

Thank you for the suggestion! Can you tell me a little more about why the current options to unlock 1Password don't work for your use case? You can unlock 1Password for iOS using your account password, Face ID / Touch ID, or your device passcode.

I look forward to hearing from you. 🙂

-Dave

Dear Dave_1P,

Thank you sincerely for your prompt response.

At present, 1Password 8 offers three locking options:

1. Master Password: The purpose of a password manager is to relieve the burden of remembering multiple passwords, requiring only the recall of a single master password. My master password is both complex and lengthy, rendering it inconvenient to input each time 1Password is used.

2. Face ID: In certain situations and specific workplaces, the use of Face ID may be prohibited, necessitating the use of a passcode as an alternative. Personally, I harbor concerns about the security of relying solely on Face ID for 1Password. Notably, many applications, such as Dropbox, provide the capability to set a pin code.

3. Pin Code: Password managers bear significant importance for numerous individuals as they store valuable account credentials, bank details (including credit/debit card information), and secure notes. To enhance security and foster peace of mind, it is advisable to assign a distinct pin code to each specific application. The probability of someone inadvertently discovering your device's passcode outweighs the likelihood of them gaining access to the app's passcode.

I appreciate your attention to this matter.

@munoo

Thank you for the detailed reply. From what you've written here, it seems that the best option for your specific use case would be for you to change your account password to something that is easier to type in while still being secure. I've linked to our guide about choosing a good account password already but here it is again for convenience: How to choose a good 1Password account password

Remember that, unlike other services, 1Password doesn't just use your account password but it also uses a unique 34-character Secret Key to protect your data: About your Secret Key

That being said, I've passed your comments along to the team.

-Dave

ref: PB-33532152