Unlocking 2 vaults in 1Password

Others shouldn't have your password for your Business account, @undistinguished. You may already be aware of this so I apologize if I'm regurgitating things you already know, but the way Business accounts work is that each of your teammates gets their own credentials. You may each have access to different vaults, plus you'll each have work passwords only for yourselves – like your email – so this ensures that if you're on the engineering team and your friend works in accounting you don't have access to the books and your teammate doesn't have access to the code for internal apps. Plus, of course, neither of you will have access to any personal work Logins for the other, like your e-mail accounts.

As you may have surmised, the ideal solution here would be for your teammates not to have your business account's password, so before I suggest any alternatives, I'd like to know if they need to know that password and why. That would certainly impact what might be practical in your case and I don't want to make suggestions that would necessarily break your workflow at the office. Thanks! :+1:

We've designed this experience around the typical use-case, @kurtd, and in our experience this falls into two categories – folks who aren't using their personal accounts at work at all and those who want easy access to both at once at work, just like at home. That said, this isn't going to fit everyone's security needs and some of us will need to adjust how we use 1Password to fit those needs. To provide a personal example of how this has required me to adjust how I use 1Password, I want my folks to be able to access my data should anything happen to me. I can't share my Master Password because that would unlock my work data as well. To make sure they can access my account in an emergency without also giving them access to my work data, I've shared the password for the e-mail account I use with 1Password so that they can recover my account and set a new Master Password for it to access my personal data only should the need arise. This did present a challenge as I didn't want to give access to my regular e-mail account and had to create one for this purpose, but it's done now and it works.

To the extent it may impact your choices when using 1Password at work, it's worth noting that your app unlocks with the Master Password for the account you added first. If you add your personal account to your app at work first, someone who knows your business account Master Password (and your Secret Key) would be able to access your work data on the web, but would not be able to unlock your 1Password desktop app (and thus your personal data) because your personal Master Password would be needed to do so and they don't have that. Another option would be having separate Chrome profiles for work and personal on you devices. This would allow you to use 1Password X in each with only your work account added in your work profile and only personal on the other. As I've shifted towards using 1Password X more than my desktop app, this is something I've found works well for me (though I use two different browsers for work and personal, rather than separate profiles).

Finally, I'd be interested to know more about the concerns you're addressing with this setup. At work, I think I understand – you don't want work and personal available in the same app on a device your employer may reasonably access – but given you're doing the same thing at home, I feel like your concerns may run deeper than that. It's a challenge designing 1Password for people with such vastly varied security needs for sure and there are undoubtedly thing we could do better. Feedback like yours is a great help in meeting that challenge and knowing more about your security needs and what threats concern you would be a great help in considering how to manage those improvements if you have the time and are willing to share.

I work on our social media team, @kurtd, so I definitely feel you on that concern. I'm not too fussed on my desktop and laptop as I can easily see usernames and am okay so long as I'm careful, but I all but refuse to ever sign in to our 1Password social accounts on any mobile device. I've done it once or twice when it was absolutely necessary, but it does make me cringe.

It sounds like your concern is, at least in part, what information you see in what context. This is essentially irrelevant for you since you want more physical separation between those accounts anyway, but for those of us who use both of our accounts in a single app, All Vaults can solve that problem. On my device used primarily for work, I hide my personal vaults and on those used more for personal stuff, I hide my work vaults, which is a huge help. For you, I think separate Chrome profiles (or your current strategy with different extensions) is likely the better bet, but I figured I'd mention this just in case it might help refine your setup as well.

I don't think I have any better ideas for you beyond what's been shared now, but I do appreciate your feedback and particularly your willingness to expound on your needs. Thanks for taking the time and I'll be sure to pass what you've shared along to our development teams. :chuffed: