Get started

Use your YubiKey to sign in to your 1Password account

Learn how to set up two-factor authentication with your YubiKey and manage your authorized devices.

Two-factor authentication is an extra layer of protection for your 1Password account. With two-factor authentication, a six-digit authentication code will be required to sign in to your account on a new device, in addition to your Master Password and Secret Key. Your YubiKey can provide the authentication codes.

Tip

If you don’t have a YubiKey, use two-factor authentication with an authenticator app.

Set up two-factor authentication

Before you can use your YubiKey to sign in to your 1Password account, you’ll need to install the Yubico Authenticator app. Then follow these steps:

  1. Sign in to your account on 1Password.com.
  2. Click your name in the top right and choose My Profile.
  3. Click More Actions > Turn On Two-Factor Authentication.
  4. Enter your Master Password and click Next. You’ll see a 16-character two-factor authentication secret.
  5. Open Yubico Authenticator and choose File > New Credential.
  6. Enter your account credentials and click “Save credential”:

    • Issuer: Enter “1Password”.
    • Account name: The email address you use with your 1Password account.
    • Secret key:* The 16-character two-factor authentication secret.

    To hide the six-digit authentication codes until you touch the sensor on your YubiKey, turn on “Require touch”.

  7. On 1Password.com, click Next, then enter the six-digit authentication code.

Your 1Password account is now protected by two-factor authentication. From now on, you’ll need to enter a six-digit authentication code from Yubico Authenticator when you sign in to 1Password on a new device.

* The secret key is not the Secret Key for your 1Password account.

View and manage authorized devices

To view your authorized devices, sign in to your account on 1Password.com. Then click your name in the top right and choose My Profile.

To manage an authorized device, click next to it. You’ll find these options:

  • Deauthorize Device: Your account will be removed from the device.
  • Require Authentication Code: Your account will remain on the device, but changes you make on other devices will not appear on that device until you reauthorize using a six-digit authentication code.

Get help

Signing in to your 1Password account using your YubiKey requires:

Yubico Authenticator requires Mac, Windows, Android, or Linux. To sign in to your 1Password account on an iOS device, use a different authenticator app.

If you lose access to your YubiKey

If you lose access to your YubiKey, you won’t be able to sign in to 1Password on new devices until you turn off two-factor authentication. To turn off two-factor authentication:

  1. Sign in to your account on 1Password.com in an authorized browser.

    If you don’t have access to an authorized browser, ask someone to recover your account.

  2. Click your name in the top right and choose My Profile.
  3. Click More Actions > Turn Off Two-Factor Authentication.

If your team uses Duo

If your team uses Duo, you won’t see the option to turn on two-factor authentication because Duo is already providing multi-factor authentication for everyone on your team.

If 1Password isn’t accepting your authentication codes

Make sure the date and time are set correctly on Mac, Windows  , and Android  .

Published: