Use the TPM with windows hello greyed out? [1Password 8.6.1 is out with improved TPM support}

Hey RealAct and tmakaro, thanks for the updates. We're aware of some cases where users are being prompted to enter their account password again as you've described. Some conditions that may be causing this include Windows updates, BIOS updates, using fast startup, and changing some Windows settings which may result in the TPM state being invalidated on the next restart.

Our developers are continuing to investigate and we'll be sure to share any updates.

Ali

It seems to be a hit-and-miss, sometimes works, sometimes it doesn't. I have a supported hardware TPM 2.0 chip as I stated above. Not sure exactly what might be wrong, but sometimes after reboot or a shut-down of the system and restart, it forces me to enter the password again.

And it started working properly again.

Looks like it has stopped working properly. It was working for a few weeks, but now when I launch 1Password for the first time it gives me the "You need to enter your account password before you can use Windows Hello" prompt and once I enter my password it then unlocks AND prompts me for my pin despite being unlocked already.

I tried disabling and re-enabling "Use the TPM with WIndows Hello", but that didn't work. I'm still on 8.6.1 and I haven't made any changes to Windows Hello.

tmakaro, that's great to hear, thanks for letting us know!

1P_PeterG The 8.6.1 seems to have fixed the issue. It appears to be working as expected.

tmakaro do you still have an email conversation open with us at this point? If not, our Windows team would be happy to look into this further for you. You can find us at support+windows@1Password.com. I hope this is helpful!

(And if you do have an open conversation with us, feel free to drop the conversation ID here - it looks like this: [#AAA-11111-11] . That way we can close the loop a bit quicker.)

Hey, that's great RealAct! Fantastic news. 🥳

What you've described here in terms of the Windows Hello reset is what we'd expect from our own testing too, so it sounds like everything is now working as expected. Thank you for letting us know, and we hope you enjoy the TPM integration!

Well I ended up buying a hardware TPM 2.0 module, and now it's all working as expected. I did have to reset Windows Hello, reboot the PC and enter my password one more time before I was able to use Windows Hello with 1Password. But that was it, it's been working like a charm since.

Ok, so after deleting and re-enabling my Windows Hello pin the has now given me the option to check the box:

However, if I tick this box, then I cannot use Windows Hello to unlock 1Password at all. With it ticked, (and after restarting 1password), I don't get the option to unlock 1Password with my pin. It forces me to enter my master password and only AFTER that does it prompt me to enter my Windows Hello pin which doesn't matter because 1Password has already unlocked. I also cannot use Windows Hello to unlock 1Password after relocking (but not restarting) 1Password.

If I disabled, the tick box, then I can use my pin to unlock 1Password for subsequent unlocks (but not the first one of course).