News for hackers. Stuff that matters.

A comment on 1Password for Open Source Projects. Parent comment

Re:1Password for Open Source Projects by roustem on Wednesday April 11, 2018 @08:00PM (#16816905)
There is no way we would want to know your keys. There are several million 1Password accounts and 1Password a huge attack target. All keys are generated on the client side and encrypted with a PBKDF2-hardened combination of Master Password + Secret Key.

Details are here: https://1password.com/security/ Whitepaper (PDF): https://1password.com/teams/white-paper/

[ Parent | on HN ]

There are no comments on this comment yet.