Forum Discussion
1Password biometric auth
Hello,
I have just upgraded from 1password7 to 1password8 on my iphone and ipad. I had turned on faceID on 1password7 and have now done so on 1password8. When the device was turned off then on again, 1Password7 always required that I type my master password. This seems not to be the case with 1password8. Can this be configured? I saw an option to manually require the master password on next launch but I would like this to be automatic when I restart my iPhone or .
thanks
Thank you for describing why you would find an option to have 1Password require your account password after restarting your iOS device useful. I can't say whether such a feature will be added to 1Password but I've filed a feature request on your behalf to have the team look into this further for future updates.
For the time being, you can set 1Password to require your account password more frequently by following these steps:
- Open and unlock 1Password for iOS.
- Tap the icon for your account or collection at the top left and choose Settings. (If you’re using an iPad, tap your account or collection at the top of the sidebar.)
- Tap Security.
- Set "Confirm my account password" to Every day.
And, as you mentioned, you can turn off biometrics for 1Password manually at anytime by tapping on the Lock 1Password and pause biometrics button on the Security settings page in the app.-Dave
PB-46892903
9 Replies
- Philippeb18New Contributor
I see that as an added security measure. When the phone is turned off or restarted IOS requires the passcode to unlock the phone. Also, the passphrase for 1Password can be required at different intervals. My passphrase to unlock 1Password is stronger and different than my iPhone passcode. I can manually require the passphrase, can this be an option in the security pane of the settings?
- 1P_Dave
Moderator
Thank you for the reply. I'm interested in the specific threat that you're trying to protect against here. Do you regularly turn off your iPhone? Are you concerned that someone else will be able to use Face ID to unlock 1Password? If that's the case then why not just turn off Face ID unlock for 1Password entirely so that you always need to use your account password?
I'm happy to pass along your feedback but I'd like to make sure that I understand the use case here.
-Dave
- Philippeb18New Contributor
I do regularly turn off my iPhone as a security measure against malicious actors or possible malware. 1Password8 also permits me to force close the app and suspend biometrics manually in the security settings so that the next time it is launched it will require my password. I would posit that the threat model for that option is similar to asking for the password on a reboot. Also, by using my passphrase regularly it is fresh in my mind so it is more unlikely that I will forget it as it is rather long.
- 1P_Dave
Moderator
Hello Philippeb18! 👋
Thanks for reaching out! You can adjust how often 1Password locks by configuring your auto-lock settings:
- Open and unlock 1Password.
- Tap the icon for your account or collection at the top left and choose Settings. (If you’re using an iPad, tap your account or collection at the top of the sidebar.)
- Choose Security.
For example, you can choose to have 1Password lock when your device locks. You can read more about auto-lock here: How to set 1Password to lock automaticallyI saw an option to manually require the master password on next launch but I would like this to be automatic when I restart my iPhone or .
1Password 8 for iOS doesn't include an option to require your account password after you restart your iPhone. Can you tell me a little more about why you'd like to see such an option be added?
-Dave
- TomDedicated Contributor
Hi 1P_Dave I was also under the impression that it asked for it on reboots and force closes and what not, but apparently it doesn't do that (or anymore?). I can think of a good number of cases, but having two factor against being forced to log in to 1P is one ... when you 'force lock' an iOS device, if someone knows (or makes sure to know) your unlock code -> faceid becomes active -> they wouldn't need your Master Password (or SSO in case of Business accounts).
If I shutdown/reboot a macOS or Windows laptop - even with fingerprint or face-recognition one always requires to re-sign-in to unlock the biometric cache, right?- 1P_Dave
Moderator
Thank you for the feedback! I'll pass your comments along to the team as well.
If I shutdown/reboot a macOS or Windows laptop - even with fingerprint or face-recognition one always requires to re-sign-in to unlock the biometric cache, right?
If you choose to use Touch ID to unlock 1Password for Mac, or Windows Hello with TPM to unlock 1Password for Windows, then you won't be prompted for your account password after restarting your device and you'll be able to unlock 1Password using biometrics.
-Dave
PB-46892962