Unauthorized access to Dropbox = keys to 1Password kingdom?

Sam Stefanki
Sam Stefanki
Community Member

First, thank you for making 1Password so easy to use. I love the program and I use it multiple times every day.

My question is as follows. I sync my 1Password information to Dropbox, which allows me to access all my passwords at work using 1Password Anywhere. I love this feature. However, if someone gains access to my Dropbox account, will they be able to access (i.e., read) all my 1Password information (i.e., usernames and passwords, credit card numbers, etc.) that I store in Dropbox? My 1Password password is NOT the same as my Dropbox password, fortunately. Essentially, I'm wondering if all my information is still secure (because it is protected by the non-Dropbox password that protects my 1Password database) even though someone was able to get into my Dropbox account. If someone can read and access all my 1Password information simply by getting into my Dropbox account, then I will need to change all my passwords ASAP.

Thanks for your help!

Comments

  • Megan
    Megan
    1Password Alumni

    Hi Sam,

    I am so glad you are thinking strongly about the security of your data - thats what we like to see!

    We are very confident about storing 1Password data in the cloud, as your data file is encrypted with an exceedingly secure encryption algorithm called AES. Even if someone were to acquire a copy of your 1Password data file, it would be extremely difficult (approaching impossible in a human lifetime) for them to actually gain access to your passwords without your Master Password. In short, we believe it is just as secure as having the data on your laptop. To learn more about cloud data security, have a read through the following article.

    http://help.agilebits.com/1Password3/cloud_storage_security.html

    And you can see the thoughts behind our data format's design here.

    http://learn.agilebits.com/1Password4/Security/keychain-design.html

    Also, you can check out our blog for many more articles that go into the nitty gritty math behind what makes 1Password so secure.

    http://blog.agilebits.com/tag/cryptography_/

    I hope this helps, but we're here if you have any further questions!

This discussion has been closed.