Blog | 1Password

NEWS
Understanding Sharing
by Jeffrey Goldberg May 14, 2013
1Password 4.2 for iOS has been released with a really nifty sharing feature. This allows you to conveniently share items with other people and keep them updated. Before getting into the details, it is important to know that the data is well encrypted within 1Password, but it is not encrypted when it is not in 1Password. In other words: share over …
Continue reading
SECURITY
1Password hashcat strong master passwords
by Jeffrey Goldberg Mar 16, 2013
You may have heard some news going around about hashcat, a password cracking tool, that recently increased its ability to guess Master Passwords for 1Password data files. It’s an impressive achievement for hashcat, and it is important to understand what this does and doesn’t mean for 1Password.
Continue reading
SECURITY
Why we moved to 256-bit AES keys
by Jeffrey Goldberg Mar 9, 2013
Why 1Password moved to using 256-bit AES keys instead of 128-bit keys.
Continue reading
SECURITY
You have secrets; we don’t, why our data format is public
by Jeffrey Goldberg Mar 6, 2013
The security of your 1Password data depends on only one secret—your Master Password. It also depends on plenty of things that aren’t secret. For example, 1Password uses the AES encryption algorithm, every detail of which is defined by public standards; your security depends on the security of AES, but there is nothing secret about it.
Continue reading
SECURITY
Authenticated Encryption and how not to get caught chasing a coyote
by Jeffrey Goldberg Jan 18, 2013
I introduced HMAC (Hash-based Message Authentication Code) through the back door when talking about the Time-based One Time Password (TOTP) of Dropbox’s two-step verification. But TOTP is actually a peculiar way to use HMAC. Let’s explore what Message Authentication Codes (MACs) are normally used for and why they play such an important role in the …
Continue reading
SECURITY
Doing the two-step until the end of time
by Jeffrey Goldberg Dec 20, 2012
In my discussion of Dropbox’s new two-step authentication, I skimped on the cryptography. Because we had to move quickly, I wanted to focus at the time just on our recommendations, so I told a few fibs about how the way the six digit codes “get” to your phone. Now I want to explain how it really works.
Continue reading