Stop requring masterpass after every restart.

I share much of the same issues as GolferWHH, and even though TPM is enabled, can't get Windows Hello to show up. Very frustrating, and will not be able to sell my wife on entering the master password every reboot. I can barely get her to use Lastpass with the persistent login.

Thanks Tertius3 for the suggestion.

Following the google search led me to a solution posted by RogueScholar at the following link: https://1password.community/discussion/comment/665840#Comment_665840. In working my way to this solution I found a comment in another thread on TPM that spoke to what may have been the root cause of my problem, I was on Windows 10 without TPM enabled in the BIOS before upgrading to WIN 11. Rogue Scholar's solution worked for me.

Again, many thanks to all. Now just to replicate this on my wife's account on the Desktop PC.

Also GolferWHH did you try unticking the "Show Windows prompt automatically" (in 1PW) on the PC (then do a full reboot) - just to see? It just means you have to click the smiley face every time to do the PIN; but it could be some weird issue with that between 1PW and the PC causing the issue...?

I can't help with Windows 11 I'm afraid, I'm still on Windows 10 Pro (as apparently my, admittedly older, AMD Radeon 5870 GPU isn't adequate for Windows 11) - but I would not be surprised if an upgrade from 10 to 11 (versus a clean install of 11) has caused some sort of issue...

This Google search will bring up a huge number of answers to the greyed out TPM setting: https://www.google.com/search?q=1password+tpm+greyed+out

Thanks Mycenius and Terius3. I've got Hello Pin to work on the Laptop but the desktop is dringing me around the bend. I believe it is a Windows 11/BIOS/?? and maybe the 1Password App. I'm off on a search of various help sites to see if I can figure out the source of the problem. I've attached to screen shots of the 1PW app security settings for the Laptop and the Desktop. Note: The Laptop is an LG Gram which came with Windows 11 per-installed, while the desktop is a custom build with a MSI B450 TOMAHAWK MAX motherboard, which I've confirmed TPM is enabled. The desktop was originally a Win 10, which I upgraded to Win 11 a month ago.

Laptop Security settings:

The Desktop Security settings from 1PW app are:

I a stumped as to why the 1PW app for the desktop PC (verified it is the same Version) doesn't allow me to select "Use the TPM with Windows Helllo". Also don't know if this is a lead to why I can't get Win Hello PIN to work on Desktop and be recognized by 1PW.

Anyway, I tend to reason better when I talk, or in this case write about the situation I'm trying to figure out.

Again thanks for the assistance, More problem solving for me.

You don't need any biometric device on a Windows PC to use Windows Hello. You can always create a Hello PIN to login to Windows.

👍🏻👍🏻

GolferWHH You don't need any biometric device on a Windows PC to use Windows Hello. You can always create a Hello PIN to login to Windows. A small password prompt pops up that asks the pin - independent from any biometric feature. Use a short pin of 4 to 6 digits and/or letters that's easy to enter, and the login to 1Password becomes quite simple. It only asks your account pasword the first time after a reboot (if you don't enable TPM support in 1Password) or every 2 weeks (if you do enable TPM support in 1Password, and 2 weeks to make you not forget your account password).

You don't want to use the website for managing your items but the desktop or mobile apps instead. Use the website only as fallback or if you need to manage your account such as billing.

I'm in a trial phase of 1Password, coming from a competitor (Maybe). I've not had a good start with 1PW and the requirement to re-enter my Master Password when I've shut down my Microsoft 11 desktop PC, which doesn't have a bio-metric device that allows me to use Windows Hello.

My context: We (my wife is a second user and not technically literate so I'm our Tech Support) have: 1 Desktop PC (Windows 11 no bio-metric nor Windows Hello), 1 Laptop with Windows Hello capability (2ndary windows device), 2 Pixel Phones (Android), 1 Samsung Tab S6 light (No bio-metric).

To date I've done most of my testing out 1Password on the Desktop PC. I've made life more challenging/frustrating as while I live in Canada I inadvertently established the trial account on the *.COM (US) site. Frustrating found that I can't logon tot he *.CA site.

I've further created frustration by not understanding the different capabilities of the 1Password App (country neutral it seems), the 1Password Web site (must logon to *.COM" site, and the browser extension (Firefox and Edge). As I'm working towards understanding how to use each of these 1LP apps(?) I'm most frustrated by having to logon every time I've shut down the PC so my wife can use it. Leaving it on 24/7 in my opinion creates it's own security exposures (you can't access a PC and it's data if your PC is off).

I'll be trying the Laptop next to see if life is acceptable with a Windows Hello capable PC. I've tried security settings as per Ekalb's suggestion, but also have selected "Unlock using Windows Hello" as I have a Windows Hello capable Laptop. I'll next deselect the Unlock using Windows Hello and see it this works.

A comment if I may. Given our Windows PC use is in our locked condo we have pretty good physical security. We only use two PC's, which I've found somewhere on my 1LastPass account so 1LP knows which PC's are accessing my/our accounts. I fail to see why 1Password makes logon process so frustratingly challenging. The PW manager I'm looking at leaving had the ability to stipulate "Trust the PC for xx days". Seemed to me a pretty balanced approach to security for a Password Manager.

My long winded comments.

I must say this just may be a deal breaker given our requirements and use case.

Not having to type the password in means the pc is storing the password somewhere on the machine to decrypt the database. This means if the machine is compromised the decryption key for the database would be readily available. As ag_mike_d pointed out you want to use the 1Password desktop app connect it to Windows Hello backed by your computer's TPM. This way what is needed to unlock your database is stored on the TPM and not the operating system itself. Then you can simply unlock it with your Windows Hello biometrics or pin code.

Hello strif4,

Thanks for your messages and sorry for the delay in response over the holidays.

While adjusting the idle lock timer is certainly an option, (thanks Ekalb) - there are other options to help ease unlocking 1Password 8 for Windows: Use Windows Hello to unlock 1Password on your Windows PC

While using the account password is still required after system restarts, there is an additional option to allow Windows Hello to persist through restarts if you have a hardware backed Trusted Platform Module (TPM) 2.0 in your device. Those details can be found here: Windows Hello - Manage your settings

Give this a try and let us know how this works for you. If you have any other questions, we'll be here to help!