Forum Discussion

rpaulson's avatar
rpaulson
New Contributor
3 months ago
Solved

Too much power in the hands of a family manager

Back in 2020/2021, a lot of us—myself included—poured time, energy, and probably a few cups of coffee into voicing concerns on the 1Password Community platform. One particularly lively thread, "Too much power in the hands of a family manager," seems to have mysteriously vanished during the migration to the new community. Poof! Problem solved. Gotta admire the efficiency 😄

Maybe those 1Password users on Reddit (https://www.reddit.com/r/1Password/comments/1m4gm7g/it_is_insane_that_you_can_lose_your_1password/) wouldn’t have wasted their time and energy if they had seen the thread.

Don't get me wrong — I'm a happy 1Password user, and in my opinion, it's (still) the most polished password manager out there. It offers many great features that most others lack, like SSH key management, CLI integration, and more. I also understand that the Family account is essentially a rebranded Business account, so changing the underlying architecture is likely a complex task — and perhaps not even worth the effort if revenue from family accounts is relatively small compared to business clients. That said, I’d simply prefer honesty and transparency over silencing valid, critical voices.

 

  • Hello rpaulson​! 👋

    Thank you for following up. Your original thread was accidentally caught in our spam filter, I’ve now released it and merged it with your other thread. I’m sorry for the mix-up and any confusion it caused.

    Regarding the old thread, only conversations active within the last three years were migrated to the new community however none of your feedback has been lost. Your feature requests and input have been shared with our product team internally, and they remain open and under consideration.

    At the moment, 1Password Families memberships are designed with the assumption that you trust the family organizer. The organizer has certain powers — such as inviting members, recovering accounts, and deleting members. If that level of trust isn’t comfortable for you, then you can use your own individual account instead.

    That being said, this is an area that we'd like to improve. Our Senior Director of Product, End User Experience, shared an update recently on Reddit:

    Thanks for the feedback and I do recognize the implications this can have. There are pretty major architectural changes that need to happen to make this possible. We have not forgotten about this and it is still on my list. It's just taking time. There are, however, some other architectural changes happening that might accelerate this work.

    We’re grateful for your thoughtful feedback, and we’ll continue to share updates as progress is made however we don't have a timeline on when this might be. Thank you again for raising this, it truly helps us shape 1Password for the better.

    -Dave

11 Replies

  • Hello rpaulson​! 👋

    Thank you for following up. Your original thread was accidentally caught in our spam filter, I’ve now released it and merged it with your other thread. I’m sorry for the mix-up and any confusion it caused.

    Regarding the old thread, only conversations active within the last three years were migrated to the new community however none of your feedback has been lost. Your feature requests and input have been shared with our product team internally, and they remain open and under consideration.

    At the moment, 1Password Families memberships are designed with the assumption that you trust the family organizer. The organizer has certain powers — such as inviting members, recovering accounts, and deleting members. If that level of trust isn’t comfortable for you, then you can use your own individual account instead.

    That being said, this is an area that we'd like to improve. Our Senior Director of Product, End User Experience, shared an update recently on Reddit:

    Thanks for the feedback and I do recognize the implications this can have. There are pretty major architectural changes that need to happen to make this possible. We have not forgotten about this and it is still on my list. It's just taking time. There are, however, some other architectural changes happening that might accelerate this work.

    We’re grateful for your thoughtful feedback, and we’ll continue to share updates as progress is made however we don't have a timeline on when this might be. Thank you again for raising this, it truly helps us shape 1Password for the better.

    -Dave

  • rpaulson's avatar
    rpaulson
    New Contributor

    Family managers are not company administrators and should not have the ability to delete other family members' accounts.

    1password team: Do you have any updates on that topic that was heavily discussed back in 2020 and 2021? Thank you.

    • sixtdb's avatar
      sixtdb
      New Contributor

      As a 'family' user ( I am the admin) I have read your comment with interest. I am not clear in understanding whether you are a 'user' who has been deleted by a 'family' manager OR you are a 'Family Manager' raising concerns?

      As a 'Family Manager' myself, I certainly see it as my responsibility to protect the 'whole' and that includes each individual account and their data. I see my responsibility to make sure backups are done on a regular basis and I export ALL data from ALL vaults on a regular basis (monthly). All the exports are saved offline, encrypted and on secure 'none' Internet connected server. All family members can have access to the server and the data, by accessing our documentation that we keep on all our I.T. home infrastructure - should I drop dead!  You may have already guessed that I have spent 35+ years managing I.T. - hence that fixation on 'documentation'.

      None of this is perhaps helpful to your concerns, but going forward, you might instigate similar  practices to protect your 'family' 1Password.  I have similar practices regarding documenting bank accounts, pensions, trusts, investments etc. It may sound over the top, but if I drop dead, I would like to know that my wife and family know and can access all my affairs.

      A.

      • rpaulson's avatar
        rpaulson
        New Contributor

        The entire discussion is happening on Reddit again, just google: "It is insane that you can lose your 1Password account PERMANENTLY if you’re removed from a Family account"

        Links don't seem to be working here at the moment.

    • rpaulson's avatar
      rpaulson
      New Contributor

      Even though I’m concerned this message might also be deleted – like the thread I started two days ago, which disappeared almost immediately—I’ll try once more to share my perspective:

      Many of us, myself included, invested significant time, energy, and probably more than a few cups of coffee into raising our concerns on the 1Password Community platform. One particularly active thread, "Too much power in the hands of a family manager," appears to have mysteriously vanished during the migration to the new community.

      Don't get me wrong — I'm a happy 1Password user, and in my opinion, it's (still) the most polished password manager out there. It offers many great features that most others lack, like SSH key management, CLI integration, and more. I also understand that the Family account is essentially a rebranded Business account, so changing the underlying architecture is likely a complex task – and perhaps not even worth the effort if revenue from family accounts is relatively small compared to business clients. That said, I’d simply prefer honesty and transparency over silencing valid, critical voices.