Hacker News new | ask | show | jobs
by AGKyle 2557 days ago
Our implementation of 2FA only happens when adding your account to a new device. Subsequent unlocks do not require any sort of 2FA except for certain conditions.

Our apps do not currently support U2F/WebAuthn when signing in, so they'll default back to TOTP based until we implement support for U2F. We aren't making any promises as to when this will arrive but at least two of our apps now have some form of support for it internally. It's far from complete and not ready for users but it is being worked on.

Note that U2F in this case is only about authentication, not decryption of data. This is why it's only used on initial setup of your account on a new device. The cryptography side for unlocking 1Password is entirely independent of U2F/MFA.

Hope that helps but let me know if you have any questions.

Kyle

1Password