Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
oschoenborn
8 months agoNew Contributor
Feedback regarding the new 1Password sign-in experience
The recent addition of ability to setup another device by scanning a QR code on existing device is very risky and should require more than just biometric authentication at the moment the operation is...
1P_Dave
Moderator
8 months agoHello oschoenborn! ๐
Thank you for the feedback! Can you tell me a little more about your concerns regarding the new sign in experience? The new experience is safe and secure and the team has spent a lot of time making sure that the new sign-in experience increases convenience without sacrificing security:
The design of the QR code ensures that it's resistant to phishing and you will always need to confirm your intent to link a new device to your 1Password account by entering the right confirmation number or accepting a prompt after scanning the QR code to establish a secure and encrypted connection between devices to transfer session information and key material. The code itself doesnโt contain sensitive information, making it safe from screenshots or shoulder surfers.
Once signed in, 1Password will send you a sign-in notification email as it does for all successful sign-in attempts, even those with the existing manual method. You'll also see the new device listed on your profile (in the top right corner) when logging into and accessing 1Password on the web.
You can always continue to use the existing manual sign-in method if you wish. ๐
-Dave