Companies / 1Password / incidents

1Password: Sign-in failure in some cases due to 2FA prompt not appearing

Affected components: Canada - Sign inSign inEnterprise - Sign inSign inSign inUSA/Global - Sign inEurope - Sign inSign in

Timeline of updates

1. investigating2026-01-23 20:33 UTC

   Our team has identified an issue and are actively investigating where when a password is changed and an account has 2FA enabled, the 2FA prompt does not appear upon attempting to sign-in.

2. identified2026-01-23 23:10 UTC

   Our team has identified an issue where when a password is changed and an account has 2FA enabled or when the Restricted Failed Login Attempts policy is enabled with 2FA enforced, the 2FA prompt does not appear upon attempting to sign-in. We are actively working on a fix and that work will continue into early next week.

3. monitoring2026-01-26 21:30 UTC

   To mitigate this issue, we've had to temporarily disable the Sign-In Attempts policy and are actively working on a permanent fix to resolve the issue and re-enable use of this policy. This policy will not be in effect for those with it turned on until we resolve this issue.

4. monitoring2026-01-29 20:02 UTC

   To mitigate this issue, we temporarily disabled the Sign-In Attempts policy — this policy will not be in effect for those with it turned on until we resolve this issue. We are actively working on a permanent fix to resolve the issue and re-enable use of this policy. We will share another update when that work is complete.

5. monitoring2026-01-30 16:55 UTC

   To mitigate this issue, we temporarily disabled the Sign-In Attempts policy — this policy will not be in effect for those with it turned on until we resolve this issue. We are actively working on a permanent fix to resolve the issue and re-enable use of this policy. We will share another update when that work is complete.

6. monitoring2026-02-02 19:21 UTC

   To mitigate this issue, we temporarily disabled the Sign-In Attempts policy — this policy will not be in effect for those with it turned on until we resolve this issue. Our team continues to work on a permanent fix to resolve the issue and re-enable use of this policy. We will share another update when that work is complete.

7. monitoring2026-02-11 19:57 UTC

   Our engineering team are in the process of merging the fix for this issue and we'll be able to provide a date for when the fix will be deployed, by the end of this week. In the meantime, the Sign-In attempts policy will remain disabled until we determine all areas where it is conflicting with 2FA.

8. monitoring2026-02-18 22:42 UTC

   The fix for the identified 2FA issue is currently available in our Beta release, and planned to be deployed in our next Production release (8.12.4). In the meantime, the Sign-In attempts policy will remain disabled until we determine all areas where it is conflicting with 2FA.

9. resolved2026-03-03 15:52 UTC

   The fix for the identified 2FA issue has been resolved as of version 8.12.4. The Sign-In attempts policy will become available in the coming weeks.

Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab). 1Password profile · Recent 1Password incidents · Markdown · JSON