Safety of 1password
I just downloaded this app and was looking around the site & came across the article about researchers hacking apple & getting onto 1password. I know how to navigate around the internet but lack some understanding of how it all works. So , how safe are my passwords?
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Comments
-
Very safe, but not as safe as previously thought. The bug does not capture your master password or your vault, but could possibly capture individual passwords.
In practice it's not that bad, as malware would have to be downloaded installed, and actually run before any damage could occur. So if you don't run programs you don't recognise, that removes a way of attack. One of the issues, though, was that the researchers were able to get their malware into the App Store, so (again in theory) you might get an app from there that you thought was safe but wasn't.
I don't see that there is any vulnerability if you simply do not run any programs you haven't already run. That's using extreme caution. More reasonable would be not to install any program even from the App Store unless you already have confidence in the developer. I'm going to be more careful about useful little one-trick apps and avoid some.
For more information look at https://discussions.agilebits.com/discussion/42900/osx-and-ios-1pw-keychain-vulnerability-report-on-the-register#latest and https://blog.agilebits.com/2015/06/17/1password-inter-process-communication-discussion/
0 -
Thank you for your reply. It helps me to understand a little mor
0
