Travel mode and crossing borders
I'm not sure if I'm missing something, but after enabling travel mode, if stopped at a border I can still be asked to log on the the mobile web interface and disable travel mode. It seems travel mode is just an inconvenience more so than a barrier for nosy people.
The question is therefore: is there any way to prevent travel mode from being disabled when crossing a border? I have some accounts which I consider private and would prefer to keep that way.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided
Comments
-
I'm not sure if I'm missing something, but after enabling travel mode, if stopped at a border I can still be asked to log on the the mobile web interface and disable travel mode.
That is true. But we’ve never, to my knowledge, heard of something like that happening. There is a big difference between being forced to hand over data that you are carrying with you across the boarder, and being forced to turn over data that you are not carrying with you across the border. The purpose of Travel Mode is to put your 1Password data into that latter category.
There is also no indication in the 1Password app interface that you have Travel Mode enabled, so unless an official is specifically aware of the existence of such a feature...
The question is therefore: is there any way to prevent travel mode from being disabled when crossing a border?
Nope. The only way I could even think to attempt that would be to put a timer on it (e.x. I’m crossing the border from 1pm until 3pm; don’t restore my vaults until then). The problem with that is, of course, travel doesn’t always happen on time and there also may be nothing stopping an official from holding you until the timer expires.
At the end of the day Travel Mode is a tool in the toolbox, and it may not be the ultimate solution to your border crossing needs.
Ben
0 -
Thanks for your reply. I had figured as much.
0 -
You’re very welcome. If we can be of further assistance, please don’t hesitate to contact us. :)
Ben
0 -
Travel Mode seems OK when traveling to the USA, as US Agents are not entitled to search online sites only devices presented at the border.... see this link.
That's all fine but it's not a great idea to quote law at the US border. I basically have nothing to hide. I would always cooperate and provide any information the US agent asks for in order to expedite things. (Of course some travelers may have highly sensitive business documents stored).
However; there are other countries where legislation does not exist to prevent online probes. For instance the climate in UK, NZ and Australia is to be able to demand anything; again I would comply as I have nothing to hide,
The real problem with 1 Password making claims for a secure Travel Mode is that: it seems it can be easily defeated...
Once an agent has the 1P app open on your mobile device (via the Master Password that you have been forced to provide) THEY CAN GET ALL THE INFORMATION THEY NEED TO PROBE ONLINE USING ..... for instance, using the Menu Bar on a notebook.....
Account... >Get Emergency Kit ...
The Emergency Kit immediately "hands-over" the website, Username and the Secret Key in a couple of clicks or a convenient QR code. Of course you already disclosed the Master Password.
I could foresee a common situation whereby; once you opened the 1P app... the mobile device would be taken to a back room for scrutiny.
Potentially this makes 1Password Travel Mode a little problematic even if you have created a "safe" Vault for travel.
It would be better if the Emergency Kit was not so easily available within the 1Password app.
If I had sensitive commercial / business data within 1 Password I would not trust Travel Mode. In fact, I might consider removing any sign of a password manager from my devices before travel. There are better ways to store sensitive data and most companies have safe data policies.
amcd
0 -
I’m not really sure if there is either a question or a suggestion in there, but I’ll try to respond to each of the things you’ve mentioned.
Once an agent has the 1P app open on your mobile device (via the Master Password that you have been forced to provide) THEY CAN GET ALL THE INFORMATION THEY NEED TO PROBE ONLINE USING ..... for instance, using the Menu Bar on a notebook.....
As I mentioned above Travel Mode is a tool in your privacy toolbox. It isn’t indended to be a “be all end all” solution or to account for every situation. If you can be compelled to provide someone with all of your credentials there is nothing that 1Password can do. That's essentially game over, Travel Mode or not.
It would be better if the Emergency Kit was not so easily available within the 1Password app.
Perhaps in these specific scenarios, but consider that most people aren't regularly crossing hostile borders. In fact I'd wager there are a large percentage of our customers who will never cross any national border. One of the most common issues we come across is people losing their credentials for 1Password. Making the Emergency Kit less accessible would likely increase those occurrences. Also if they can compel you to turn over your Master Password what would stop them from compelling you to turn over your other details, regardless of how obsecure they are or how long it takes you to produce them?
If I had sensitive commercial / business data within 1 Password I would not trust Travel Mode. In fact, I might consider removing any sign of a password manager from my devices before travel. There are better ways to store sensitive data and most companies have safe data policies.
That seems like a reasonable precaution, especially if you know you'll be crossing a hostile border.
Ben
0
