Laptop Stolen, changed master password via iOS, will old password work on laptop app still?

kurtcruse
kurtcruse
Community Member
in Mac

My laptop was stolen. I have 1Password installed on said laptop and on my phone. I have since changed my master password via my phone, but I'm curious if the OS X version can still be accessed with the old password offline. Does 1P connect to the internet each time it's launched and does it sync via a master cloud account or if the thief was to find the password on my computer without connecting the machine to the internet, could they login and access all my passwords?

I have enabled the Find My Mac security so my machine will lock up, hopefully, as soon as it is connected to the internet. But I'm concerned about what damage they can do before that point.

Comments

  • Stephen_C
    Stephen_C
    Community Member

    The security of your old 1P data on your stolen Mac depends on the security of your old master password. Nobody will be able to obtain your 1P data on your old Mac without cracking the old master password.

    1P does not depend upon any active Internet connection when it is opened. It may well seek to sync to any Cloud account you have previously set up to use for sync of 1P data when the old Mac connects to the Net. However, even if the 1P data were to sync to your stolen Mac it could still not be accessed without the thief knowing, or cracking, your master password. In any event, Find My Mac should disable your old Mac the moment it connects to the Net.

    I'm sorry for the pain and hassle you undoubtedly have following the theft.

    Stephen

  • littlebobbytables
    littlebobbytables
    1Password Alumni

    Hi @kurtcruse‌

    If you have any concerns here's what I would suggest for peace of mind. Disable sync temporarily on your iPhone and start changing all of your important passwords now. Start with your email accounts and then move to your cloud services e.g. Apple and Dropbox. At this point you can re-enable sync if you want because you know the person can no longer access either Dropbox/iCloud or access your email for any sort of reset code or link. Then you'll want to work down the list.

    It will be time intensive but far quicker then any worst case scenario of people breaking the security of your stolen laptop.

This discussion has been closed.