It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
Solved
Feedback for improving 1Password account recovery process
Hello,
About the 1Password recovery process, for several months it has been possible to generate a recovery code.
With this recovery code the chances to be locked out of the account are less, b...
Hello nicos18! 👋
Thank you for the feedback! Currently, a recovery code allows you to recover access to your 1Password account if you lose either your account password or Secret Key (or, if you're using the passkey unlock beta, then you can recover access if you lose either your passkey or all of your trusted devices). To use a recovery code, you'll still need to have access to your email address to confirm your identity before being able to recover access to your passkey unlock account: Generate and use recovery codes
That being said, I can see how having more options for identity verification beyond access to your email address would be useful and I've filed a feature request on your behalf.
Regarding two-factor authentication (2FA), you can add multiple authentication factors so that you can still sign in even if you lose one factor. For example, you can add both an authentication app and a hardware security key:
- Turn on two-factor authentication for your 1Password account
- Use your security key as a second factor for your 1Password account
I hope that helps. 🙂
-Dave
ref: PB-41992348
nicos18 1P_Dave that’s a good point. But is that less secure than an email account where I need to choose a password which is storable and rememberable for human brains? That’s an account where I can’t use 2fa, can’t use strong complex artificial passwords.
I would make this that easy to keep it in mind, note password on a sheet of paper, or have a dedicated mailbox just for that … I am not sure if this is more secure than high jacking (keep in mind you still need the recovery code, just having the mail isn’t enough) - or have a second password manager for this.
