1Password Account and License
I stupidly bought the Mac version of 1Password from the App Store. I bought it at full price.
I wasn't really able to get the best out of 1Password because the limited cross platform sync options didn't really work for me. Syncing between Mac, iOS and Android was close to impossible.
The devs made no promises and even less progress with Google Drive integration.
Now, of course, it is easy to see why: why produce a decent standalone product when you can sell perpetual subscriptions for basic functionality?
Nice business model. Not so nice to sell loyal customers short.
The Travis Ormandy disclosure also raises more questions than are being answered.
Life is too short and money too hard earned to put up with this nonsense.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Comments
-
Hi @Retty - Thank you for reaching out to us. Sorry to hear you weren't able to get the most out of using 1Password. Were you syncing across platforms using Dropbox previously? This is actually one of the main reasons we decided to provide customers with a better solution and improved 1Password experience. With our new 1Password.com accounts, we take care of all the syncing on our end so you don't have to manage a third party sync source. Our new service allows us to offer more features and benefits like auto-sync since we handle everything in-house.
As far as security it's always our top priority. Our security is very open to make sure everyone knows what we're doing behind the scenes, we wrote a White Paper and published it on our website.
There are three umbrellas of security with our new 1Password.com accounts. Before all of them is your Master Password and Account Key. In the standalone version of 1Password, everything is protected by your Master Password and all the security wizardry in the app. But in Teams, the Account Key is used to strengthen things even further. If you have a weak password, it's very unlikely someone will be able to access your data because the Account Key is a 128-bit string of characters that's generated locally when you set up your account. It never leaves your device, and we ask that you print it out to have a copy in case you need it later.
It’s great to have a Master Password and Account Key protect your data, but they also need to communicate with the server to access your data, so we use three layers to protect things at rest and in transit. The first layer is based on your Master Password and Account key, which are used to derive a secret that is used to securely encrypt all of your data, both at rest and in transit between your devices and our servers. The second layer is based on the Secure Remote Password protocol. It allows your devices and our servers to make sure they are who they say they are. This provides an additional layer of protection against attack. The third and final layer is the standard TLS/SSL protocol. This layer provides a final layer of encryption and also allows your web browser to indicate that you were communicating directly with a 1Password web server.
If you'd like to learn more about the security of 1Password, head to https://1password.com/security.
Thank you again for taking the time to share your experience & constructive feedback.
0
