Why does 1Password sometimes ask for my Master Password and not accept Touch ID

but if someone gets into the cloud drive, they only have the secret key, not your master password.

Correct :+1:

Also, the simplest way to always have access to the Secret Key is inside the 1Password app itself: if you have 1Password on multiple devices, and you have it installed on your phone too, you can retrieve the Secret Key from inside the 1Password app on the phone without even touching the Emergency Kit :+1:

@annabelled:

So my takeaway is that I'll always need to remember my Master Password even though I would have thought that it doesn't get more secure than Touch ID.

That's absolutely correct: your data is encrypted with your Master Password, so while Touch ID is convenient so you don't have to type your password very often, it is not a substitute for the password :+1:

This is recommended by 1Password (https://support.1password.com/emergency-kit/ ), so they probably have an official explanation, but if someone gets into the cloud drive, they only have the secret key, not your master password. I also use two-factor authentication, so they'd need that too.

And your iCloud (or Dropbox or Google Drive) password stored in 1Password? Someone pointed out the circularity to me a while back...

I'd suggest keeping a PDF of the Emergency Kit (with the master password field blank) in your iCloud Drive (or Dropbox or Google Drive). Then you can use the QR code to set up new devices.

Note that 1Password (ONE password, get it?) should really be 2Passwords. You need to memorize your Master Password and be able to recall it at will AND you need to have your Secret Key written down somewhere (it is exceedingly difficult to memorize) as it will be needed as well from time to time. Touch ID is simply a temporary convenience that will disappear if and when your device, its operating system, the current version of 1Password, or your finger does.

@annabelled Absolutely, you should memorize your master password—that's the "one password" in "1Password"! 😁 I just changed my master password and I intentionally set it to ask me more frequently to help me memorize it. It's also a good idea to write it down and store it in a safe place at home in case you forget.

@ag_ana will have a more official explanation but my understanding is the master password is the "real" password—it is required to decrypt the stored passwords, and you'll need it to access your vaults on your phone, a new device, etc. Touch ID is just a convenient shortcut to bypass the password once you've already entered it into your Mac or iPhone.

Thank you benmattison and @ag_ana. So my takeaway is that I'll always need to remember my Master Password even though I would have thought that it doesn't get more secure than Touch ID.

Hi @annabelled!

In addition to what benmattison wrote, I have taken this from our documentation page on Touch ID:

Sometimes you’ll need to enter your Master Password instead of using Touch ID:

• If your fingerprint isn’t recognized three times in a row
• If you’re trying to change your Master Password
• If you add or delete a fingerprint from your device
• If the amount of time in Preferences > Security > Require Master Password has elapsed

Under Preferences/Security, there's an option to change how often it asks for your Master Password. Two weeks is the longest option.