Security Regressions in 1Password 8 for iOS

Fully agree on both points from OP. Please fix/bring back those features!

I also miss the function to choose how often It asks for the Master Password

@Jack.P_1P

A thief, a drunkard and an app designer are sentenced to death by guillotine. The executioner has the thief lay face up looking towards heaven.

The blade comes down and stops just before the thief's neck. This is seen as a sign from God and the thief is set free.

The drunkard also lays down face up hoping he’ll be saved like the thief. The blade again stops inches from the neck and the drunkard is freed.

The app designer also lays down in the face up position. The executioner starts to raise the blade when the app designer exclaims “Wait a minute! I can see where your problem is.”

Hi Ben,

Yes of course I know I can turn it off. You could probably guess what I meant, but I typed a little to fast there. I meant:

In all seriousness, if the main phone lock FaceID is what we are falling back to, why even require bother offering the option of FaceID to open 1PW at all?

To be clear, I said this in the context of the suggestion that under duress I could invoke iOS's emergency lock feature via 5 fast clicks of the side button, or long press of side and volume button. My point there was was as if that is what we were reliant on, then why bother offering FaceID for 1Pw at all.

why even require FaceID to open 1PW at all?

Hey @steven1

I'm not entirely sure I'm correctly interpreting what you're saying, but Face ID is optional and can be turned off in 1Password's settings. 1Password > Settings > Security > Face ID. If I've misunderstood, could you please rephrase? Thanks!

Ben

FWIW, if coming under duress you can force IOS to require your PIN one time by clicking the power button 5 times quickly.

Yes, some OS level protections can be invoked, but not if you are sleeping, restrained, etc.

A lot of corporations use 1PW now, and I can see a corporate breach coming from an employee's phone being unlocked after a sales event party, lol.

In all seriousness, if the main phone lock FaceID is what we are falling back to, why even require FaceID to open 1PW at all? I have encountered exactly ZERO other apps doing this, and for my password manager to do this is scary.

I have reverted back to 1p7 with AutoUpdates disabled for now, in case they decide to add this 'feature' to 1p7 as well.

FWIW, if coming under duress you can force IOS to require your PIN one time by clicking the power button 5 times quickly.

I'm glad 1Password can now distinguish between different "faces" and react accordingly but I'd still like to have a max attempts limit and be able to set a timeout duration (1 day, 1 week, after restart, etc).

After failing with Face ID why isn't there popping up the PIN of iOS like if I want to unlock my iPhone? This was the behavior with 1PW7 in iOS autofill.

Face ID can tell the difference between a "bad read", "no face found", and "definitely the wrong face", and we differentiate between them now in 1Password 8, which we didn't do in 1Password 7.

This is horrible. This means a roommate, partner, illegal LE search, thugs, etc. can keep trying to unlock 1pW without your consent, but against your face.

For an app that contains all your secrets, this is horrible. Combined with taking away all options to force an password entry (e.g. After Device Restart) you have made it super easy for others to get into your 1pW. I hope I am wrong, but perhaps that was your intent anyway.

I hope you change your stance and reconsider this behaviour.

Hi @steven1 / AMonitorDarkly / @asking_questions / @agheaG8a:

Thanks for bringing this up. Face ID can tell the difference between a "bad read", "no face found", and "definitely the wrong face", and we differentiate between them now in 1Password 8, which we didn't do in 1Password 7. If Face ID is getting "bad read" or "no face found", Face ID allows more attempts. This would explain why closing your eyes or pointing your phone at the ceiling allows multiple attempts. If a face is seen by Face ID that it's confident isn't the registered face, at that point you'll be limited to a handful of attempts to use Face ID before your account password is required.

As for controlling when you need to enter your account password, or manually locking 1Password and having that require your account password, not just Face ID or Touch ID, we're continuing to discuss that internally, but I don't have anything to share just yet.

Jack