Forum Discussion

ChrisPro's avatar
ChrisPro
New Contributor
3 months ago

Why does 1Password launch Windows Hello AFTER unlocking?

Shouldn't this be before unlocking? What is the point of using Windows Hello?
browser extension
discussion
windows
ChrisPro's avatar
ChrisPro
New Contributor
3 months ago

Yes TPM mode is enabled.

So this is because the TPM state changed, alrighty.

Still, why does it come up after entering my password, it's somewhat confusing right?

Shouldn't Windows Hello come first, and then show an error message clearly outlining that the TPM state has changed, then prompt for the master password after that?

Just seems like an oddly designed user experience.

1P_Gem's avatar
1P_Gem
Icon for Moderator rankModerator
3 months ago

Hi ChrisPro​, thanks for confirming! It does sound like you're running into the expected behaviour after a TPM state change.

If Windows Hello were shown first in this situation, it wouldn't be able to unlock 1Password.

When the TPM state changes, the stored unlock secret becomes invalid. Windows Hello relies on that secret to unlock 1Password, so once it is no longer usable, Hello cannot unlock the app.

This means that 1Password has to fall back to your account password. After you unlock with your password and decrypt your data, 1Password can then call up a Hello prompt in order to set the unlock secret back up in the TPM.

I hope that makes sense, but let me know if you have any further questions!