Security Regressions in 1Password 8 for iOS
First off, I want to echo the frustrations voiced by many on losing control of when to require the master password to be input, whether it be "Never" or, as 1p7 allowed, 1 hr, 1 day, ..., "After Device Restart".
It is this last one ("After Device Restart") that I miss the most. I want to be sure that if I turn off the phone, the master password will be required the next time.What's worse? Unlike what the moderators are saying, on iOS on my phone, Face ID always remains available, regardless of the number of incorrect tries.
You can try this on your phone...close your eyes and try to unlock with Face ID. After a couple of attempts, it gives you the option to enter the master password, but the invoke FaceID button remains on the right, and you can click it and try again, and again, and again.....
At least on the Mac 1p8, it does indeed force you to enter the master password after a couple of incorrect TouchID attempts.
This is a horrible situation for people that may be in vulnerable positions, with someone trying an unlimited attempts to unlock your 1pW.
Please tell me you know about this and are fixing it!
Oh, and please sync last unlock (agree with others that being forced to unexpectedly enter the password in strange locations is not good) across devices, and please please bring back the option to require master password After Device Restart.
1Password Version: 8.9.0
Extension Version: Not Provided
OS Version: iOS 15.6
Browser:_ Not Provided