1Password - Access 1Password Offline
Setup Biometric Unlock
Offline access works when a user unlocks their device with biometrics. Biometric authentication is permitted alongside Unlock with SSO (NetID). This allows users to unlock 1Password with Touch ID, Face ID, Windows Hello, and other biometric scanners, even when offline.
Biometric Access:
- Users signing in with NetID can use biometrics to unlock 1Password for up to 30 days without needing to re-authenticate with NetID.
Cached Credentials:
- If a user’s NetID session is still cached, they can unlock 1Password with biometrics. If the cached credentials are lost, users need to re-authenticate with NetID.
Device Support:
- If a device does not support biometrics, users will not be able to access their items offline.
Unlock Comparison: NetID vs Biometrics
| Sign in to 1Password | Unlock offline | |
|---|---|---|
| Devices with strong platform key management (iOS, macOS, Android) | Use your NetID to sign in to 1Password. Your device stores its device key in platform-protected key storage. | With biometric unlock turned on in our SSO settings, you can unlock with biometrics. An encrypted version of your 1Password data is stored locally, and your device stores the keys to unlock it in platform-protected key storage. |
| Other platforms (Windows, Linux) | Use your NetID to sign in to 1Password. Your device stores your device key obfuscated on-disk. | With biometric unlock turned on in our SSO settings, you can unlock with biometrics. An encrypted version of your 1Password data is stored locally, and your device stores the keys to unlock it in platform-protected key storage. If you quit 1Password and restart it, you must be connected to the internet to unlock again. |
| 1Password in the browser | Use your NetID to sign in to 1Password. Your device stores your device key obfuscated on-disk. | Offline unlock is not available in the browser. |
Steps to Ensure Offline Access
- Offline access is only possible if you have previously signed into 1Password on the device while online.
- If you have never logged into 1Password on a particular device, offline access will not be available.
- Ensure biometric unlock is enabled in 1Password Settings if supported by your device.
- If relying on NetID-only authentication, plan for alternative access methods in case of an outage.
Extended NetID Outage
If 1Password is up, but NetID services are offline, 1Password administrators can temporarily change a users authentication method. This would allow a user to login to 1Password with a primary password rather than NetID. In such a scenario, contact the 1Password administrators at 1passwordadmins@office365.wisc.edu.
By following these steps, UW-Madison users can ensure continued access to their passwords during outages, whether due to NetID issues or 1Password service disruptions.