How 1Password is designed to keep your data safe, even in the event of a breach

Re:How 1Password is designed to keep your data safe, even in... by Veliladon on Thursday January 12, 2023 @12:52PM (#34357657)

I'm a user of 1Password and a huge fan of the service but I'd really like to have a device sponsor another device automatically (like how iCloud does it) instead of having to present the secret key to the user to manually input into the new client.

[ Parent | on HN ]

Re:How 1Password is designed to keep your data safe, even in... by dteare on Thursday January 12, 2023 @01:35PM (#34358290)

I agree providing the Secret Key to other devices can be a pain. In fact it's our #1 onboarding challenge. On Apple devices specifically it's much easier as we can store it in iCloud Keychain, but we'd like to make it simpler everywhere.

Curious if you've had a chance to try the Setup Code? It's not as slick as iCloud since we don't own the OS, but it enables you to scan the code and get all the account details on your new device. That way all you need to do is type your password.

On that note we recently had a hackathon around this to make things even simpler and we had some success there. I'm hoping we can make this real and share it in an update later this year.

[ Parent | on HN ]

Re:How 1Password is designed to keep your data safe, even in... by John23832 on Thursday January 12, 2023 @01:46PM (#34358453)

The secret key is what keeps your account safe in case of compromise though?

Security is always at odds with convenience. - Steve Gibson

[ Parent | on HN ]

Re:How 1Password is designed to keep your data safe, even in... by DavideNL on Thursday January 12, 2023 @02:17PM (#34358908)

"Your Secret Key and your 1Password account password both protect your data. They’re combined to create the full encryption key that encrypts everything you store in 1Password."

https://support.1password.com/secret-key-security/

[ Parent | on HN ]

Re:How 1Password is designed to keep your data safe, even in... by John23832 on Thursday January 12, 2023 @02:39PM (#34359189)

Right. That reaffirms what I said.

[ Parent | on HN ]

Re:How 1Password is designed to keep your data safe, even in... by YPPH on Sunday January 15, 2023 @07:29PM (#34395267)

I will reach for my secret key perhaps once or twice per year when I buy a new device. That being so, it's really no biggie to type in.

The obvious benefit of a secret key is its high entropy. But I also like how the secret key discourages me from logging into 1Password on anything but my own, trusted, devices. In my view, password managers should not be accessed from other people's computers or internet kiosks.

[ Parent | on HN ]