It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
Former Member
3 years agoMaster-Passwort bei jedem Neustart des PCs und Notebooks
Ich habe mich durch die entsprechenden Support-Community Artikel gelesen und auch beispielsweise den Post von pherti74 «Wieso funktioniert Windows Hello nicht ohne vorherige Anmeldung mit dem Passwor...
1P_Gem
1Password Team
3 years agoHi @Chris63, thanks for getting back to me! I'm so glad to hear that all is working well now.
It sounds as if you had previously stopped during the set up process - for the first unlock after enabling the TPM option, 1Password will ask for your account password, followed by a Windows Hello prompt to finish setting up the unlock key with your TPM. After this, it should start to work as expected and allow Hello unlock to persist through restarts.
Now I have to ask you one more question: How security-relevant the warning "When this setting is on, a malicious app could gain access to your 1Password information." is?
When you enable TPM support, 1Password no longer has control over what can prompt you to access the key we create on the TPM, or when. With regular Hello unlock, everything stays within 1Password's processes so any prompt phishing by a malicious process wouldn't work. However, with TPM integration enabled, all a malicious process would need to do in order to decrypt your data is trick you into accepting a context-less Hello prompt.
In general, the level of risk depends on how careful you are with your device. The best way to stay safe and avoid this occurring would be to make sure you trust the apps you use, and keep malicious applications off your system by following the points below:
- Keep your computer and software updated.
- Exercise caution when clicking links or downloading anything.
- Be careful about opening email attachments or images.
- Don't trust pop-up windows that ask you to download software.
- Use security software such as an anti-malware application.
I hope this helps, but if you have any further questions, let me know! 😄