2FA

Hi @Chris63, thanks for getting back to me! I'm so glad to hear that all is working well now.

It sounds as if you had previously stopped during the set up process - for the first unlock after enabling the TPM option, 1Password will ask for your account password, followed by a Windows Hello prompt to finish setting up the unlock key with your TPM. After this, it should start to work as expected and allow Hello unlock to persist through restarts.

Now I have to ask you one more question: How security-relevant the warning "When this setting is on, a malicious app could gain access to your 1Password information." is?

When you enable TPM support, 1Password no longer has control over what can prompt you to access the key we create on the TPM, or when. With regular Hello unlock, everything stays within 1Password's processes so any prompt phishing by a malicious process wouldn't work. However, with TPM integration enabled, all a malicious process would need to do in order to decrypt your data is trick you into accepting a context-less Hello prompt.

In general, the level of risk depends on how careful you are with your device. The best way to stay safe and avoid this occurring would be to make sure you trust the apps you use, and keep malicious applications off your system by following the points below:

• Keep your computer and software updated.
• Exercise caution when clicking links or downloading anything.
• Be careful about opening email attachments or images.
• Don't trust pop-up windows that ask you to download software.
• Use security software such as an anti-malware application.

I hope this helps, but if you have any further questions, let me know! 😄