News for hackers. Stuff that matters.

A comment on Getting 1Password 7 ready for the Mac App Store. Parent comment

Re:Getting 1Password 7 ready for the Mac App Store by roustem on Sunday May 20, 2018 @04:44PM (#17114643)
Better security and better user experience to start with.

Unlike most of competing products, 1Password encrypts pretty much all information, including vault names, item titles, URLs, tags. It is easier to list what's not encrypted. It is also probably the only product using SRP.

Now check out what information is sent in plaintext or base64-encoded in other products.

[ Parent | on HN ]
Re:Getting 1Password 7 ready for the Mac App Store by Barrin92 on Sunday May 20, 2018 @06:46PM (#17115150)
As far as I am aware lastpass and keeper are the only two password managers to receive soc II security reports.

Also I'm pretty confident the entire lastpass vault is encrypted locally as well.

[ Parent | on HN ]
Re:Getting 1Password 7 ready for the Mac App Store by roustem on Monday May 21, 2018 @12:07PM (#17119381)
1Password service has completed SOC 2 type 1 and 2 certification as well. It is more about internal company processes and how they are followed than encryption.

"Hey your data is safe just because we have SOC 2 certification" -- that's not want you want to hear.

About vault being encrypted locally: https://hackernoon.com/psa-lastpass-does-not-encrypt-everyth...

[ Parent | on HN ]