Is the web vault secure?

As I know, A third-party browser extension has the ability to read the content all of web pages opened in browsers.
So, If I installed a hostile browser extension and visit myaccount.1password.com, will the extension be able to read all my Login and Secure Note?


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Referrer: forum-search:Is the web vault secure?

Comments

  • Hi @insub

    This is a great question. The answer is essentially "yes," but it isn't quite that simple. If someone were going to design a malicious browser extension, they would probably simply monitor all 'password' fields for their content. As such you'd be exposing your data to them whether you were using 1Password or not.

    In short: with or without a password manager, you'll still want to practice good computing security hygiene and avoid installing untrustworthy software.

    Ben

This discussion has been closed.