Stolen computer

buckeye81

My computer was stolen and it was still on when taken. I don't know what I had set as the timeout for 1Password to lock. I was synching with Dropbox and discontinued that and am now synching with iCloud. But I'm worried that as I continue to change passwords on my iPhone that somehow the information may be getting to my stolen PC and they culprits are able to see my new passwords. I have changed my 1Password master password.

Plato

The default timer is five minutes. Also, lock when sleep is default. MacBooks sleep when closed and I expect that other laptops also work that way. Hope that helps.

Plato

Also, you're assuming that the thief knows how to navigate 1Password.

Plato

If you're still worried, turn your sync OFF and wait a week. Sooner or later, the thief has got to do something to result in a 1Password lock.

buckeye81

Thanks. Few more questions. Can I switch my existing database to a new account and close the old one?

Rad

Hi @buckeye81‌,

Thanks for taking the time to write to us. I am really sorry to hear that your computer got stolen.

The first this you should do is to remote wipe your computer, assuming that you had Find My Mac enabled. Even if you remote wipe your Mac and you changed your Master Password, we strongly recommend that you start changing the password for your all you items in 1Password and to make sure that your new Master Password could not easily be guessed.

In order for you newly created iCloud data to be visible on the stolen Mac, the thief must unlock 1Password using your old Master Password to unlock 1Password, disable Dropbox sync and enable iCloud sync. There will be a prompt for the new Master Password since the Master Passwords do not match.

I hope that this helps.

Best,

Rad

buckeye81

Can I move everything to a new username?

littlebobbytables

Hi @buckeye81‌

I don't believe there is any way to shift either data or purchases from one Apple ID to another.

Your best course of action is to (if you haven't already) is the following.

1. Reset all passwords and security questions for all your email accounts. There's no point resetting other passwords until you are sure password reset emails can't be observed by the thief.
2. Reset your password and security questions for your Apple ID. I'm assuming this KB on deauthorizing computers applies for more than just iTunes now, either way it's worth doing.
3. Do the same with Dropbox, they have a section under Settings titled Security that will allow you unlink devices.

If you're worried at all you can export the entire contents of your current primary vault in the .1pif format (be warned, this is unencrypted so be very careful), follow the procedure for Starting Over and create a brand new primary vault with brand new encryption keys and Master Password. You'd then import the .1pif file. Note that the guide talks about moving your support files, not deleting the so the old vault is still recoverable. You'd also want to secure delete that .1pif file afterwards so you know it's definitely deleted.

You can now safely use either Dropbox or iCloud to sync your vault with your other devices. The thief won't be able to access either, answer any of your new security questions or view password reset emails.

Then as Rad suggested, start changing all passwords until every single one has been changed.

Does that help?