Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Security Regressions in 1Password 8 for iOS
First off, I want to echo the frustrations voiced by many on losing control of when to require the master password to be input, whether it be "Never" or, as 1p7 allowed, 1 hr, 1 day, ..., "After Device Restart".
It is this last one ("After Device Restart") that I miss the most. I want to be sure that if I turn off the phone, the master password will be required the next time.What's worse? Unlike what the moderators are saying, on iOS on my phone, Face ID always remains available, regardless of the number of incorrect tries.
You can try this on your phone...close your eyes and try to unlock with Face ID. After a couple of attempts, it gives you the option to enter the master password, but the invoke FaceID button remains on the right, and you can click it and try again, and again, and again.....
At least on the Mac 1p8, it does indeed force you to enter the master password after a couple of incorrect TouchID attempts.
This is a horrible situation for people that may be in vulnerable positions, with someone trying an unlimited attempts to unlock your 1pW.
Please tell me you know about this and are fixing it!
Oh, and please sync last unlock (agree with others that being forced to unexpectedly enter the password in strange locations is not good) across devices, and please please bring back the option to require master password After Device Restart.
1Password Version: 8.9.0
Extension Version: Not Provided
OS Version: iOS 15.6
Browser:_ Not Provided
15 Replies
Please bring back the options to allow users to:
- set when to require the master password to be re-entered (why is this hardcoded to two weeks in 1p8?)
- force lock the app manually, which should require the master password to unlock (just like the behaviour in 1p7)Those two features were present in 1p7, but not having them in v8 feels like a major security oversight.
+1000000
Wow, allowing FaceID after several failed attempts is a major issue. There’s a reason iOS and pretty much any other app only give you a few tries.
