1password licsence key can be leaked to others by "Help/Enter licsence key"
when 1password is unlocked, others can see licsence key by "Help/Enter licsence key", and this is acceptable.
but when 1password is locked, others still can see licsence key by "Help/Enter licsence key->relpace licsence", and this is unacceptable for a password manager.
I wish that developers can fix this problem as soon as possibe.
1Password Version: 4.6
Extension Version: Not Provided
OS Version: win7
Sync Type: Not Provided
Comments
-
@Anyrex: A greater concern is why someone has complete access to your computer in the first place! After all, your 1Password license is not personally identifiable, but someone can mine a great deal of information about you from your computer itself if they're using it with your privileges. Keep in mind that they could simply copy your 1Password license file in this case anyway. It can't be encrypted, or 1Password wouldn't be able to read it! And you wouldn't have the password to decrypt it. So this would be mere obfuscation, as your computer itself needs to be secured to protect this information.
So be sure to secure your computer to guard all of your data, including your 1Password key. That said, we may change this behaviour in the future. Thanks for bringing this up! :)
ref: OPW-494
0
