Blog | 1Password

SECURITY
Crackers report great news for 1Password 4
by Jeffrey Goldberg Mar 10, 2014
To understand why this is really good news for us and for 1Password users, it is important to know what “crack” means in this context. I’ll come back round to that and why we encourage the developers of hashcat, John the Ripper, and cryptohaze to take a crack at 1Password. But first, let’s talk about this news and what it says about your password …
Continue reading
SECURITY
1Password security doesn’t depend on SSL
by Jeffrey Goldberg Feb 23, 2014
The security of your 1Password data does not depend on the security of SSL/TLS. 1Password keeps your data encrypted with your Master Password. This means that, even if an attacker is able to intercept the communication between your system and a sync server, they will not be able to decrypt your 1Password data.
Continue reading
SECURITY
Your Master Password is your defense from Dropbox breaches, real and imagined
by Jeffrey Goldberg Jan 12, 2014
Rumors of a Dropbox data breach spread this weekend, a breach that ultimately turned out to be false. But even in instances of false alarms, it is useful to remind 1Password users that their 1Password data cannot be decrypted without the Master Password. So let me take this opportunity to remind everyone that your 1Password data cannot be decrypted …
Continue reading
SECURITY
IOS
The NSA can do what to my iPhone?
by Jeffrey Goldberg Dec 31, 2013
After Der Spiegel, along with Jakob Appelbaum at the 30th meeting of the Chaos Computer Club, published an astonishing trove of documents revealing a great deal of the extent of their penetration of the network and capabilities to install spying mechanisms into individuals’ computers and devices, one of the least significant documents is getting …
Continue reading
SECURITY
MAC
Time to give 1Password 4 for Mac’s Security Audit a whirl
by Jeffrey Goldberg Nov 26, 2013
It was bound to happen eventually. A massive Adobe data theft of 130 million customer names, emails, encrypted passwords, source code, and more will enable almost limitless password reuse attacks in the coming weeks.
Continue reading
SECURITY
1Password and the Crypto Wars
by Jeffrey Goldberg Sep 6, 2013
Of all of the revelations about the NSA that began in June 2013 the one that has shocked me the most is the fact that the United States National Security Agency has been deliberately inserting weaknesses into security products and even into NIST standards. In light of this, it is fit and proper for anyone who relies on 1Password for their security …
Continue reading