1Password in iOS Master passcode

Julian89
Julian89
Community Member

I have a question. If someone was able to extract encrypted 1Password data onto another device and then try to use bruteforce to decrypt it...

Would he have to hack the 4 digit PIN (i enabled it on my iphone) or the more complex master password??

Comments

  • Julian89
    Julian89
    Community Member

    This is about iOS!

  • Drew_AG
    Drew_AG
    1Password Alumni

    Hi @Julian89,

    If someone were to somehow get a copy of your 1Password data file, they would not be able to gain access to your data without your master password. The PIN code feature would not be carried over to another device. But even if someone stole your device and tried to open the 1Password app with your PIN code, entering an incorrect PIN code will cause the app to ask for the master password instead.

    Hopefully this helps!

  • Julian89
    Julian89
    Community Member

    So the Master-Password is the weakest point. Since i dont have to enter it all the time, i can choose a very complex password and my data is safe.

    Awesome. Thanks!

  • danco
    danco
    Volunteer Moderator

    But make sure you know your "very complex" password!!! There are regular forum posts from people who have forgotten their passwords, and nothing can be done by AgileBits to help them.

  • Excellent point @danco. :)

  • bobandshellyf
    bobandshellyf
    Community Member

    When will Agile Bits give us the option of not turning on a device passcode but still using only a passcode for their app? I don't like to set a device passcode, but do want to set up 1password access without having to enter the master password each time. Thank you!

  • Hi @bobandshellyf‌

    We can't securely use a PIN code for 1Password if there is no PIN on the device.

  • littlebobbytables
    littlebobbytables
    1Password Alumni

    Hi @bobandshellyf‌

    There are times when we make security decisions we know or suspect won't be popular but we believe are in the best interest of the user. This may be one of those times I'm afraid. We have a request for this but at the moment it isn't being considered.

    From a personal point of view I wouldn't feel safe not having a PIN on my iPhone. In fact I went one stage further and use a 7 digit PIN instead of the bog standard 4 digit one. Given everything that is on your typical smart phone these days securing it is strongly advised.

This discussion has been closed.