Little Snitch: "*.1passwordservices.com"

System

This discussion was created from comments split from: Little Snitch Report: 'This connection is not documented'. Security and/or privacy issue?.

caparomula

Just had a similar experience. I am in the US and Little Snitch indicates that it is accessing data.1passwordservices.com in Germany. Not only is this site not listed in the manifest, but it also is outside the US.

Dave_1P

@caparomula

Thanks for reaching out. It's expected behaviour that 1Password might need to reach out to this domain: 1Password ports and domains

I took at peak at 1Password 8's Internet Access Policy and I see this domain listed:

Are you able to post a screenshot of what you're seeing in Little Snitch?

-Dave

caparomula

This time around it was "telemetry.1passwordservices.com"

Unknown

This content has been removed.

Dave_1P

@caparomula

Thank you for the question. *.1passwordservices.com is one of 1Password's domains and it is normal for the desktop app to communicate with this domain and its subdomains.

telemetry.1passwordservices.com is specifically part of 1Password's privacy-preserving telemetry system. If you’re using a 1Password.com account then your secure data (your encrypted passwords and other items) is hosted in the United States. Telemetry data, if you've chosen to participate, is hosted in the European Union for all 1Password accounts, including those in the United States and Canada.

It does appear that documentation for this subdomain hasn't yet been included in 1Password's Internet Access Policy (IAP) for Little Snitch and I've filed an issue to get documentation for this subdomain added. For the time being, you can find the connection documented on our website: 1Password ports and domains

-Dave

ref: dev/core/core#30468

edit: Added geolocation information.

Unknown

This content has been removed.