1Password Account Set Up

1Password is a password manager that securely stores and manages your passwords and other sensitive information. It not only helps you create strong passwords and avoid phishing attempts but also simplifies your everyday tasks by solving password-related issues, saving you time.

Who is Eligible?

Active Faculty or Staff

Creating Your Account

Users with an @oakland.edu email address who wish to access 1Password can request an account through the Service Catalog here.

When your e-form is processed by UTS, you will receive an email from "accounts@1password.com" containing an invitation to create your 1Password account. It’s recommended to complete this process on the device you use most often. Any other device you use to access your account will prompt you to verify the device via a code sent to a previously activated device. In the email, you’ll find a "join now" button inviting you to join 1Password. Click on it to proceed.

Select Join now

Join 1Password

You’ll be redirected to a webpage where you’ll need to enter your OU credentials.
Note: If you have an administrative account, be sure to log in with your standard account credentials.

Enter your first and last name and select the Next button

Create your individual, unique password (which should be different than your NetID password) for your account and select Next

A screen with your Secret Key will appear along with a button to download your Emergency Kit. This is your secret key. Click download to save the form to your device.

What to do with Your Emergency Kit

• Download the PDF version of Emergency Kit - DO NOT populate the password and upload to your Google Drive or Webmail.
• Print the Emergency Kit and fill in the password section. Store in a safe location so that only you have access to your password/account.
  • Please remember that Google Drive is not an approved location to store passwords.

Once your account is confirmed, you’ll be directed to 1Password’s homepage to view your dashboard.

1Password Apps

For the most secure experience UTS recommends using your OU 1Password Business Account only via the web at oakland-university.1password.com.   If you are interested in using the other features of 1Password Business (e.g. Browser Plug-in or the Desktop \ Mobile Apps) please see additional guidance in the FAQ section below.

The login screen on a trusted browser will only require your password.

The login screen on a different browser/computer will require your email, secret key and password. If you forgot, you can refer back to the emergency kit you downloaded with your password (This is why it’s important to fill out and save your emergency kit).

When securely logged in, you can add, edit and view your vault/password data in the section entitled Private. You may view departmental group vaults by choosing Groups in the right hand menu pane.

You can leverage extra functionality, such as autofilling username & password, by installing the browser plug-in and/or desktop or mobile apps on university provided devices including desktop, laptops, and tablets.  Please note the installation of 1Password apps are NOT approved on shared workstations or personal devices at this time.

Instructions on how to install apps are available at: https://support.1password.com/get-the-apps/

Installing the Desktop Application

1. You’ll need to download and install the 1Password application on your device, as it’s required to verify your identity even when using the browser extension. To do this, click your name in the upper-right corner and select “Get the Apps.” This will take you to the download page. Alternatively, you can download the app directly from their website: https://1password.com/downloads. For instructions on setting up the browser extension, refer to our Troubleshooting and FAQ page.
2. Click the appropriate download link based on your operating system (Windows, macOS, iOS, Android, etc.).
3. Run the program you downloaded in the previous step. This will prompt you to install 1Password. Click "Yes" to continue. On Windows, you may receive an additional prompt asking if you want to run the software first. Click "Run" to proceed.
4. Once the application is installed, 1Password’s home screen will automatically open. Click the sign-in option to bring up a menu with available sign-in methods. For your first device, it’s easiest to use the top option, "Sign in with SSO."
5. To use "Sign in with SSO," you’ll be prompted to enter the sign-in address (https://oakland-edu.1password.com) and your full @oakland.edu email address.
   • You’ll then be prompted to sign in with DUO. If you’re already logged into https://my.oakland.edu, this process will be automatic.
6. When logging into a device for the first time, you’ll need to verify the device or browser using 1Password on a previously confirmed device. On the 1Password OU webpage, you’ll see the image shown under step 7. If not, there may be a red bell alert at the top-right corner of the page, indicating that a new device is attempting to log in. Click the red bell to go to your ‘My Profile’ page.
7. From the "My Profile" page under Pending Devices, click "View." This will allow you to accept or deny the device. Click Accept and enter the validation code into your 1Password application.
8. After the initial login, you will only need to select "Sign in with DUO" to access your vaults. If you’re using Firefox as your default browser, the verification page to confirm your identity may not close automatically once finished. If you’re already logged into my.oakland.edu, it will be a blank page. If you’re not logged in, it will display a "Signing in to 1Password SSO" message, which will remain open until you log in.

Adding 1Password to Additional Devices

1. Similar to the sign-in process above, download the app on the device you’re adding, either through the website https://oakland-edu.1password.com/ or directly from https://1password.com/downloads. For mobile devices, you can find the 1Password app in the appropriate app store.
2. You’ll need to verify the device or browser using 1Password when logging in on a new device, following the same steps as above. On the 1Password webpage, a red bell will indicate a recent device attempt. Clicking the red bell will take you to your ‘My Profile’ page. From there, under Pending Devices, click "View" to accept or deny the device. Click Accept and enter the validation code into the 1Password application.

FAQ

• How does 1Password protect my information?
  • https://1password.com/tour/ 
  • https://1password.com/security/
• How does DUO MFA work with 1 Password?
  • Web Application prompts each time 
  • Desktop Client - Prompts at enrollment and is required to sync with 1Password cloud
  • Mobile App -  Prompts at enrollment and is required to sync with 1Password cloud
  • Important: In some situations, such as when using Desktop and Mobile Apps, you may be able to open a vault without responding to the Duo MFA prompt. This only allows you to access locally cached information, changes made on your device or in the cloud are not propagated. To ensure current content, always authenticate with DUO when prompted. 
• Can I use Biometric Authentication with 1Password?
  • Yes, if your device supports Biometric authentication you may use it to unlock your 1Password OU Business Account.  Please refer to the remainder of this document for guidance on if/when it is appropriate to use 1Password with personal equipment.
• What if I’ve forgotten my password or can’t login to 1Password?
  • If you are unable to regain access to your account using your Emergency Kit, UTS has the ability to recover your account. Request account recovery by submitting the 1Password User Access Request and selecting the “Recovery” option.  Please note that once your account is recovered you will have access to all of your data but will:
    • Receive a new Secret Key and will need to create a new 1Password account password.
    • Need to update your Emergency Kit using the instructions above.
    • Be required to sign in again on all devices.
• Can I use 1Password on a personal device?
  • UTS prefers you only access 1Password using a university owned asset such as desktop, laptops, and tablets.  If you must access 1Password on a personal device, please do so using only the website. Be aware that other members of your household who have access to those devices could possibly log into your work-related accounts. To ensure this does not happen, you should always lock 1Password before you step away from your computer. To do this, right click on the 1Password icon and select Lock.
• Can I store non-OU credentials in 1Password? 
  • We ask that you only store work related passwords in your OU 1Password business account.  As an OU 1Password account holder, you can sign up for a free 1Password Family account to securely store and share personal information with up to 5 family members (you plus 4 additional people).
    • If you leave OU, you will be responsible for any subscription fees to continue your personal instance. 
    • Your 1Password Family Account is completely separate from your OU account.  OU does not have the ability to access the contents of your family account. 
• Can I alter 1Password settings such as a session timeout?
  • Yes, a variety of settings can be adjusted within 1Password by logging into your account, clicking your name in the top right, choosing My Profile, and clicking the gear icon.
  • Please see the 1Password Auto-Lock KB for instructions specific to changing the timeout.
• Can I access 1Password from anywhere?
  • Generally speaking 1Password ‘online mode’ is available anywhere you have internet access. 1Password ‘online access’ may be restricted from some geographical regions.
  • You can access locally stored (cached information) if you are using one of the 1Password apps.  
  • Please review the “1Password when Traveling” section below for more information on using 1Password with traveling.

1Password when Traveling

• What is Travel Mode?
  • https://blog.1password.com/introducing-travel-mode-protect-your-data-when-crossing-borders/ 
• When to use Travel Mode?
  • Travel mode should be used anytime you are traveling internationally or if you are concerned that someone may be able to get physical access to your device.  (e.g., Working from a hotel conference room, coffee shop, etc)
• International Travel?
  • If you are traveling internationally and have either the 1Password Desktop App or Mobile app installed you are required to inform UTS prior to departure. UTS will work with you to evaluate what vaults can remain accessible when traveling. In the event you travel prior to collaborating with UTS, you are responsible for enabling travel mode on your device prior to departure. 
  • Currently 1Password is blocked from [Link to prohibited regions]; you will be unable to access the 1Password website and/or sync new content when in these regions.  Locally stored credentials will remain accessible - please refer to the prior steps to determine what content may be stored locally. 

Additional Support

• OU Technology Center
• 44 Oakland Center
• Rochester, MI 48309-4479
• (248) 370-4357
• Office Hours: M-F 8:00am - 5:00pm