Password unlocks different vaults? Why does that work?
Hi there,
I am using 1Password for Mac and have two different vaults in use. Each vault has a different password.
My understanding of the encryption in use was: it uses my master password to unlock the vault and decrypt its content.
But after locking the 1Password application, i am able to unlock both vaults, by either entering the password for vault A or for vault B. How is that possible? Shouldn't 1Password missing the password to do the encryption instead of saving it somewhere? It feels like lost control for me as a user.
Comments
-
If you have a primary vault and a secondary vault the master password for your primary vault will also unlock the secondary vault. You can choose to open only the secondary vault, using its master password, by choosing that vault specifically when you open 1P.
To be quite clear, you should not be able to unlock your primary vault by entering the master password for the secondary vault so I'm not sure how you manage that!
Stephen
0 -
Hi @xpa,
I just wanted to elaborate slightly on what @Stephen_C has said.
1Password's new multiple vault feature was designed so that you still only have to remember one password, no matter how many vaults you create. Your primary vault holds the encryption keys for all of your secondary vaults. This means that unlocking your primary vault will give you quick and easy access to all of your data, regardless of which vault it is stored in.
However, you still can unlock a secondary vault on its own. In the main app, use 1Password > Switch Vault menu. (In the 1Password mini, click on the lock image on the lock screen to select the secondary vault.) Please note that when you unlock the secondary vault alone, all other vaults will remain locked. You won't be able to copy items between vaults, and you will need to enter your Master Password to view another vault.
But after locking the 1Password application, i am able to unlock both vaults, by either entering the password for vault A or for vault B. How is that possible?
As I mention above, the password for your secondary vault should NOT unlock your primary vault. If you could give us a bit more detail about the steps that you are taking, we'd love to investigate further.
0
