Local password tresor on usb stick?

Baerliner
Baerliner
Community Member

Is there a way in 1password to store all your passwords locally on a USB stick in encrypted form? Or do you always have to upload the passwords to the 1password servers? I don't really want my passwords to leave the home network, regardless of whether they are transmitted encrypted or not.Where can I find the description? Unfortunately, I couldn't find anything suitable on Google. Thank you very much.


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Browser: Not Provided

Comments

  • Tertius3
    Tertius3
    Community Member

    It's the core design of 1Password 8 to have your encrypted vaults stored in the 1Password cloud and have cached copies of these vaults on your local devices for offline access. If you don't want the cloud storage, you've chosen the wrong password manager.

  • Baerliner
    Baerliner
    Community Member

    That seems to be the case. I will change the password manager again. Thank you for your comment

  • Hello @Baerliner! 👋

    Thanks for reaching out! Old versions of 1Password used a legacy sync method that would allow you to sync a vault using a file folder. This legacy sync method was deprecated in favour of modern sync using 1Password.com which offers more features, automatic encrypted backup of your items, and is much more secure.

    As opposed to the old sync method which only used a single password, data stored in a 1Password account is protected using both your account password and your Secret Key: About your Secret Key

    No data ever leaves your device without being end-to-end encrypted: About the 1Password security model

    Was there a particular reason why you wanted to use a USB drive to store your vault? While this was something offered in the past, 1Password has moved away from it because of the usability and security limitations that this sync/storage method posed in comparison to modern sync.

    -Dave

  • Baerliner
    Baerliner
    Community Member

    Hello Dave,
    I don't want to get too political now. But governments change. If a government wants to protect your privacy today, things could look very different tomorrow. A government could exert political pressure to gain access to 1password's servers. It could also be that 1password is sold to another company. Maybe even to the Chinese. Even within the company, the company philosophy can change. See the disaster with the interface to the Ledger wallets, where data security concerns were suddenly thrown overboard and a lot of convenience and fancy new features were built in. Unfortunately, I no longer trust anyone when it comes to such important issues as my data security (especially passwords for very sensitive areas). I want only my access to the safe. Only I decrypt the data that is on my stick or my server. No one else. Since that doesn't work with 1password, I have to look for another provider or, as is currently the case, keep my passwords on paper in the safe. Tedious? Sure. But it's a lot safer than shaky IT servers that are located somewhere in the world and whose security decreases year after year in order to save costs. Sorry.

  • Dave_1P
    edited July 22

    @Baerliner

    Thanks for the reply. 1Password is designed to address that threat model: even if we were to suddenly turn "evil" then we would still be unable to access your data. Your passwords and other items never leave your devices without first being encrypted, and the only thing that exists on our servers is encrypted gibberish that is useless without your account password and Secret Key.

    The team has taken great pains to make sure that your data is safe from not only malicious attackers from outside of 1Password but from 1Password itself. If you store data in most clouds then you have to trust the cloud service provider, with 1Password you don't have to trust the cloud service provider since your data is end-to-end encrypted with keys that you control.

    Even if the government, or some other party, came to us tomorrow and asked us to decrypt your information, it would be technically impossible for us to do so since we don't know your account password and Secret Key.

    -Dave