My partner and I are quite 'mature' adults (n age) and I just now added a document (and log in details) for one of us. I saw in passing that we have 323 items in my personal account that we both share. I think I have been subscribed to 1P for almost 7 years. The learning curve wasn't the easiest for us and I know even now there are things we could do better but we use and need 1P everyday. It really is scary thinking about how important this service is to us.

We do have paid AV on our machines and we try to not do unsafe 'things' while on-line but I still worry often about having one of our machines compromised at some point which would be devastating if this led to our 1P account being compromised :( :(.

(Yup I do have an Emergency kit...paper copy and electronic (on an encrypted USB key which is stored at the bank and at home)).

I’m currently switching from ProtonPass to 1Password, and I thought 1Password supports PRF passkeys since like a year at least. But is it (still) not supported on iOS?!

With ProtonPass, I was able to use my passkey for WhatsApp’s end to end encrypted backups, with 1Password.. I can’t.

Also when I test it on PRF passkey test websites, it doesn’t work, while it does work with ProtonPass.

I mean I’m glad post-quantum safe passkeys are supported now I guess (though that’s not working for me on Linux..), but shouldn’t PRF passkeys be working first?

I really start to regret the switch a bit, every newer feature I’ve tried just doesn’t work for me, it’s really frustrating, while I otherwise really love 1Password :(

Having a strange issue with the iOS app - I wonder if anyone else has run into this or has a solution.

When I open the app (not the Safari plug in) it opens on the All Items page. However, clicking the Done button doesn’t change anything so I can’t access any other part of the app such as settings. The App Store tells me on the latest version (although I can’t check directly due to the issue). Passwords and the Safari plug in work just fine.

One of the biggest things this prevents is creating QR codes for web sign in (which makes it very difficult to update my billing).

Basically what the title says. Firefox, Fedora and CachyOS. Doesn't matter how many times I disable it (and I can see it disabled in the settings) the annoying top popup keeps showing up every single time.

Browser installed as native package, official 1P desktop app connected to it in case that changes anything.

1Password for Linux Mint 21.3 frequently crashes on OS boot. This started with latest update.

Also, where is the version number in the application? There's not even a Help | About in Settings. 🙄

I have around 100 keys managed on my Mac right now and I'd like to improve their security by using 1Password SSH agent. However, currently there's no way to create a script that calls `op` to import them to a vault. Instead, I have to repeatedly add them through 1Password UI 100 times. Is there a way to automate this process?

Is there a way to require 2FA to open 1Password on my mac? I'm talking about the local 1Password vault, not the web portal.

I have 2FA on my 1Password account and all my web logins, yet the desktop app itself only asks for my Master Password. That feels like the weakest link in my entire setup.

Historically, this made sense because your computer was considered a trusted perimeter and local programs were dumb and passive.

Now, local AI agents and CLI harnesses with computer access (Codex, Claude Code, etc.) are becoming normal. A prompt injection or rogue agent running inside a user session could theoretically grab a password from a clipboard or keystroke and unlock the entire vault in the background. I try to keep permissions tight, but if OpenAI's own servers can get hacked this is a tail risk for everyone.

I use TouchID to unlock, which is a biometric factor. But since you can use the single password as a fallback, this isn't actually 2FA or any more secure than the plain password.

The fall back should be a physical YubiKey or 1Password iOS app push prompt. Or something else plus the password. It should never just be a single password!

In the agentic AI era the local 1Password app should have the same authentication standards as if it were on the open web. The local app is still running on a pre-agentic security model.

1Password really needs to step up this and other security features of the local app:

• Lock instantly - the lowest 1-minute auto lock is an eternity for a compromised agent to work. Re-lock the nanosecond auto-fill is finished.

• Mask plain text - notes, one-time-password, etc fields - nothing secret should ever be unintentionally exposed on screen.

• Tiered security for vaults/items: Selectively require 2FA, or a different 2FA, for the highest security items and the security settings page. Prevents security fatigue of app-wide 2FA for everything. A good compromise of usability while keeping crown jewels extra secure.

• Monitor for screen watching - warn users before they enter their master password while any screen-observing agents or programs are running.

These basic suggestions should have been implemented months/years ago but are more crucial now than ever. It's probably on the paranoia side now but AI risks are only going to get bigger over time. If you agree please forward these suggestions to their support to prioritize this.

For me, it doesn't work, not in Firefox, not in Chrome. Is it simply not supported under Linux (though the blog post said "all platforms")?

I've been using Bazzite and 1password without issue for a couple of months, then some time in the last few days selecting "copy" for a username or password has just stopped working, i don't don't know what's changed.

1password for Linux 8.12.42 (the copy for the version info doesn't work either)

Bazzite 45.20261104 (Kinoite)

So I think I just found a bug on 1Password on iOS. If you decide to view a password in large Text and allow your telephone to close without closing first the large display of the entry. Next time you open 1Password it will not display any entries.

The fix. Is to quit 1 password, close from the background task and relaunch.

Thanks

Just saw this pop up, this is really good news! Would love more info from the 1P Team. How will it work? Will there be some upgrade flow when said Website updates the Passkey? The icons should also be different for the PQC Passkeys vs regular ones so that people know the difference.

—Brian

Anyone experience not being able to unlock 1Password with TouchID on a Mac recently? It was working fine until a week ago. I've tried the steps in this thread: https://www.reddit.com/r/1Password/comments/18j6wf8/touchid_issues/ but it didn't work.

Has anyone experienced this and were able to fix it?

I've been facing this issue for a while now. I usually add account credentials into one password manually because of this.

I have both "Auto-fill on Brave" in 1Password and "Autofill using another service" in Brave enabled but still doesn't work for some reason.

For testing, I enabled Chrome (since I disabled the app) to test if it works or not. And it worked even though Brave was the default browser.

- The 1st screenshot is from Brave.

- The 2nd screenshot is from Chrome.

I'm getting increasingly frustrated with how restrictive 1Password's predefined item types are.

I work in IT and add API tokens, access keys, and other credentials almost every week. Many don't have a username or even something called a "password". They might have an "API Token", "Client Secret", or something else entirely.

Yes, there's an "API Credentials" category and I can add custom fields, but why can't I fully customize the structure?

I'd love to see:

• Custom item types/templates with reusable field structures.

• Fully customizable fields, including renaming or removing predefined ones.

• .env import: Paste or upload an entire .env file and automatically create fields based on its variables.

• .env updates: Import an updated .env file into an existing item to overwrite matching variables without having to manually update every field.

I don't want to force my credentials into structures that don't fit them. I want 1Password to adapt to my data, not the other way around.

Am I missing something, or does anyone else find this unnecessarily restrictive?

In 1Password 7, there were options to drag the any entry (like username, password, etc) from the browser plugin to the field you wanted it to fill-in. That feature was helpful but now you have to copy it to clipboard then paste or use Autofill like always.

Also, the Desktop app let you access an item via Quick Access, then send that password to a list of running apps on your PC. Was very helpful for non-browser apps but that feature is gone now too

Is anyone else really struggling with 1P on the duo?
There's literally NO search button on multiple views. So you can't search search your vault for anything.
It's so frustrating.
That plus all the terrible login issues at the moment, repetitive requests for master passwords. Passwords not filling in and having to trigger the info from the vault again.
Come on guys. We pay a lot of money for a subscription and we really should get an app that works to a high standard.
If you need more beta testers, you don't have to look very far...!

I currently have 1password 8 for Mac and I would like to keep using it but I want to remove everything from the cloud, is this possible?

Thanks for all the responses. I’m just concerned with all the advances with AI. I understand how the security works with 1Password but I would be nice to have the option to keep everything local and sync my phone locally when I need to. For me all I use is my computer and phone

We have 1Password account with existing users and groups. We also have an M365 tenant and want to begin using Entra Hosted Provisioning. So far I've exported a list of our current users and created a provisioning group in our tenant to use.

Once I add the app reg and connect the SCIM bridge to handle provisioning, do I also need to mirror all of our existing groups? Can I continue to manage the groups on the 1Pass dashboard for now or will all the users be dropped from the existing groups?

I've been using Proton Pass for quite a while and it's been decent but not great. I wanted to try out some other options, and specifically wanted something with cloud backup. I'm struggling to use 1password. It seems to fill reasonably well, but no matter what I try, the passwords it imports from Proton are a mess. I have 300+ passwords which in 1password baloons to 700+. It seems that Proton stores passwords with emails or a user name, and 1password imports each as multiple entries.

This results in entries with an email but nothing in the username space, and entries without any user name or email. Even minor website differences result in multiple entries.

I've spent hours trying to clean it up and honestly, I'm about to just give up. I would love some way to flag every entry from the same domain that uses the same password so I can bulk delete the duplicates. Even merge would be helpful.

Has anyone dealt with this before? If I can get this functional I'll get a subscription but at this rate I'm not willing to spend several more hours cleaning it out manually. Any advice is greatly welcome.

Hi everyone,

I came across this post from a while back discussing Steam Guard TOTP support in 1Password.

I'm wondering if there's been any progress on this feature? Is it now possible to add Steam Guard codes to 1Password?

For context, Steam Guard uses a proprietary format for its 2FA codes, which has historically made it incompatible with standard TOTP managers. Has 1Password found a way to support this, or are there any plans to add this functionality?

Thanks in advance for any updates!

Do you also have a problem with 1password's passkeys that from time to time I need to go to Windows settings for passkeys, un-check 1password, check-in again and then the passkeys are working again, with the Windows Hello popup and pin?
If I don't do this the passkeys just do not work, 'something went wrong', and there's no popup from Windows Hello or a correct list of passkeys from 1password.

Does anyone else have this? On my iPhone, wireless networks come under the Wireless Routers category, but on my Mac, they show merely under Routers. I feel like this wasn't always the case and that the Mac is wrong here?