Security of account

@F_9083x

Thank you for the reply. If you enable two-factor authentication for your 1Password account then you'll need to supply either the six-digit one-time passcode from your authenticator app or use your Security Key in order to sign in to your 1Password account on a new device. You can read more here: Turn on two-factor authentication for your 1Password account

Without the second factor an attacker who had your account password and Secret Key would be unable to add your 1Password account to a new device.

And what about disabling 2fa? Does that require 2fa too?

If you're already using your 1Password account on a device then you don't need to enter the one-time passcode again in order to disable two-factor authentication from that device because the account has already been authenticated on that device.

Let me know if that helps clear things up. :)