Blog | 1Password

1Password and your browsing habits: What we don't know can't hurt you

by Jeffrey Goldberg Dec 3, 2015

Back doors are bad for security architecture

by Jeffrey Goldberg Jun 17, 2015

Back doors into security systems weaken security. For everyone. This remains true despite wishful thinking on the part of those who may advocate back doors.

1Password inter-process communication: a discussion

by Jeffrey Goldberg Jun 15, 2015

Wherein we discuss how 1Password protects inter-process communication in the face of cross-app resource access (XARA) attacks.

How 1Password syncs changes to your Master Password

by Rick Fillion Apr 28, 2015

Suppose you change your Master Password on one of your computers. The next time you unlock 1Password on some other device, you can unlock it with your new Master Password. How can 1Password on the second machine accept the new Master Password if we are careful to never store it?

Bcrypt is great, but is password cracking “infeasible”?

by Jeffrey Goldberg Mar 30, 2015

There are a lot of technical terms that mean something very specific to cryptographers but often mean something else to everyone else, including security professionals. Years ago I wrote about what it means to say that a cipher is “broken”. Today’s word is “infeasible”.

When is a password leak not a password leak?

by Jeffrey Goldberg Feb 13, 2015

I’d like to take a moment to talk a little bit about how people who study password behavior go about their job. In the process, I would like to thank all password researchers and, in particular, Mark Burnett for both his years of excellent research and the help he has provided to other researchers. He is unequivocally one of the good guys, even if …