Bug: Invitation process creates multiple accounts for a single email, by default (accounts)

NetpogNetpog
edited January 28 in Memberships

Repro:
1. Get an invite from a friend with a Family Account.
2. Open the emailed link in an incognito window (or clear cookies, or be logged-out).
3. Follow the instructions.
You see: That you’ve got a NEW secret key, and a new account that doesn’t include any of your existing logins.
Expect: "There's already a 1Password account with this email address! Please sign into that account, now, and we'll add any vaults shared by {inviting username}'s Family."
Optionally, also: "... or, if you want to use a different account for {inviting username}'s Family, provide a different email now."
Consequence: People (whom I find in the forums) can't log into their old account, after doing this.
Workaround: Sign in (you'll get one of the accounts, unpredictably) and click "Change email"

When this happened to me, I got a "Welcome to 1Password!" confirmation email, after accepting the invitation.
"You’re all signed up! .... Your sign-in address: {the email I'd already been using for 1Password, which now applied to TWO accounts}"

I fixed the problem, with the Workaround above, but this shouldn't be possible!


Versions, OS, Sync type: All N/A. (Irrelevant to this bug.)

Comments

  • ag_anaag_ana

    Team Member

    Hi @Netpog!

    Expect: "There's already a 1Password account with this email address! Please sign into that account, now, and we'll add any vaults shared by {inviting username}'s Family."

    A user is allowed to have multiple 1Password accounts. If they get a new invitation to join a new account, we allow them to do it, even if they already have an account. The new account could be completely separate from the one they already have, so we should not merge them.

    Optionally, also: "... or, if you want to use a different account for {inviting username}'s Family, provide a different email now."

    You are also allowed to have multiple 1Password accounts under the same email address, you don't need to create multiple emails for this.

    Can you please clarify how you think this is a bug? Thank you!

  • Fascinating. Maybe this is ideal behavior. But I need to understand:
    1. When I have multiple accounts with the same email, how do I control which one I'm signing into?
    2. When someone shares a vault with me, via an invitation sent to my usual/primary email address, do I have a choice whether to make that vault visible via my primary account, or to create a new account? (And, if so, how to choose?)

  • ag_anaag_ana

    Team Member

    @Netpog:

    1. When I have multiple accounts with the same email, how do I control which one I'm signing into?

    Each account has a different Secret Key and Master Password. You could use the same Master Password for multiple accounts, but the Secret Key will change. So depending on what combination of Secret Key and Master Password you are using, you will connect to that specific account.

    1. When someone shares a vault with me, via an invitation sent to my usual/primary email address, do I have a choice whether to make that vault visible via my primary account, or to create a new account? (And, if so, how to choose?)

    No, someone can share a vault with you only if you are already part of their account. This is why you are required to create one account first, if you are not a member of it already.

  • MrCMrC Community Moderator
    edited February 1

    @Netpog

    This is very much inline with the experience I and another 1Password Families user had.

    The results of what ultimate happens are confusing at best, for the person who invites and the invitee. There is nothing in the documentation, or the email invitation that makes it clear a new account is going to be created.

    Please either change the documentation is clearly state what will happen, and change the wording on the invitation, or allow the shared vaults to be more seamlessly integrated into a users current, everyday 1Password UI experience (I have doubts that the majority of families actually have multiple family accounts).

  • ag_anaag_ana

    Team Member

    Thank you for the feedback @MrC! We will keep this in mind moving forward and we will do our best to keep improving how you can share items within 1Password.

  • Yes, thanks, @MRC, for stating the problem better than I could.

    Just to confirm: vaults can only be shared between family members? And I can be a member of exactly one family per account. Yes?

    In any case, as MRC said, it wasn't sufficiently clear to me that I was going to be creating a second account under the same email address. (By contrast, I like the UI "Accounts" tab, in the Windows app: obvious and simple.)

    Feature request: I'd love to be able to RECEIVE an invitation at my main email address, and then ACCEPT it while specifying a different address. (But I acknowledge that most users have one email address, so I don't expect that request to get high priority.)

    And thanks, @ag_ana, for your responsiveness.

  • ag_anaag_ana

    Team Member

    @Netpog:

    Just to confirm: vaults can only be shared between family members?

    Correct.

    And I can be a member of exactly one family per account. Yes?

    Can you clarify what you mean by "one family per account"?

    You can be a member of as many 1Password Families accounts as you wish, even using the same email address, if that is what you were referring to.

    Feature request: I'd love to be able to RECEIVE an invitation at my main email address, and then ACCEPT it while specifying a different address. (But I acknowledge that most users have one email address, so I don't expect that request to get high priority.)

    Thank you for the feedback!

    And thanks, @ag_ana, for your responsiveness.

    You are very welcome :)

Leave a Comment

BoldItalicStrikethroughOrdered listUnordered list
Emoji
Image
Align leftAlign centerAlign rightToggle HTML viewToggle full pageToggle lights
Drop image/file