Blog | 1Password

SECURITY
NEWS
Introducing the 1Password Watchtower service for Heartbleed and beyond
by Jeffrey Goldberg Apr 16, 2014
When news of the internet’s Heartbleed bug broke last week, we published what we knew about it and the implications for 1Password and 1Password users. To recap: 1Password is not affected by Heartbleed, but there are steps you need to take to protect your passwords from sites that may have been affected. Today, we’re introducing a new service to …
Continue reading
SECURITY
Heartbleed: Imagine no SSL encryption, it’s scary if you try
by Jeffrey Goldberg Apr 8, 2014
Only two months ago, in the wake of the “goto fail” bug, we had to point out that 1Password’s security does not depend on SSL/TLS. Today, with the far more damaging Heartbleed bug in OpenSSL, we need to tell you the same. 1Password’s technology is not built upon SSL/TLS in general, and not upon OpenSSL in particular. 1Password’s encryption remains …
Continue reading
SECURITY
Large even prime number discovered
by Jeffrey Goldberg Apr 1, 2014
You have probably been taught that two is the only even prime number. But today mathematicians at the University of Southern North Dakota at Hoople have discovered a new, large, even prime. It is more than a million digits long and is equal to the value of 3²²³⁷⁵⁶¹+3¹¹¹⁸⁷⁸¹.
Continue reading
SECURITY
Crackers report great news for 1Password 4
by Jeffrey Goldberg Mar 10, 2014
To understand why this is really good news for us and for 1Password users, it is important to know what “crack” means in this context. I’ll come back round to that and why we encourage the developers of hashcat, John the Ripper, and cryptohaze to take a crack at 1Password. But first, let’s talk about this news and what it says about your password …
Continue reading
SECURITY
1Password security doesn’t depend on SSL
by Jeffrey Goldberg Feb 23, 2014
The security of your 1Password data does not depend on the security of SSL/TLS. 1Password keeps your data encrypted with your Master Password. This means that, even if an attacker is able to intercept the communication between your system and a sync server, they will not be able to decrypt your 1Password data.
Continue reading
SECURITY
Your Master Password is your defense from Dropbox breaches, real and imagined
by Jeffrey Goldberg Jan 12, 2014
Rumors of a Dropbox data breach spread this weekend, a breach that ultimately turned out to be false. But even in instances of false alarms, it is useful to remind 1Password users that their 1Password data cannot be decrypted without the Master Password. So let me take this opportunity to remind everyone that your 1Password data cannot be decrypted …
Continue reading