Services / Passwords & identity / 1Password

1Password

Passwords & identity · 1password.com

Four second factors on offer: security key, authenticator app, approval in an app and hardware token. The strongest is a security key.

Recommended setup

Security key + app backup

A security key only answers the real site, so it can't be phished. Set up a second method too, so a lost key doesn't lock you out.

KeySecurity keyBest option
AppAuthenticator appSupported
PushApproval in an appDuo
TokenHardware tokenYubico OTP, Duo D100 Token

Not offered: text message, phone call, email code.

Switch it on

General steps; menu names vary. 1Password's own guide has the exact screens.

  1. Sign in to 1Password and open your account's security settings. Look for two-step verification or two-factor authentication. 1Password's own guide shows the exact screens.
  2. Choose authenticator app. A QR code appears.
  3. Open your authenticator app, add an account and scan the QR code. Type the 6-digit code it shows to confirm.
  4. Choose security key. Insert a USB key, or hold an NFC key to your phone, and touch it when it blinks. Register a spare key too.
  5. Save the backup codes. Keep them in your password manager or print them; they're your way back in if you lose your phone or key.
1Password's setup guide ↗Lost your second factor? ↗

Before you start

!

Teams using Duo with 1Password can't enable other 2FA methods.

!

Non-U2F Hardware tokens and custom software methods are only available through Duo.