How does the mac os app authenticate a non trusted device

squash

Hi, my understanding (and correct me if I am wrong), that the secret key and master password are only stored locally and not on 1Password's servers. So when logging in for the first time on a non trusted device, how does the app authenticate if the secret key or master password are correct?

Thanks for all your help.

---

1Password Version: 7.2.1
Extension Version: Not Provided
OS Version: 10.14
Sync Type: Not Provided

Lars

@squash - ahhhh, excellent question. You sound like just the type of person who would enjoy the heck out of reading the very detailed yet still highly readable for the layman scribblings of our Chief Defender Against the Dark Arts, jpgoldberg, in our 1password.com security white paper, particularly the sections A Modern Approach to Authentication starting on page 12 and the more-detailed dive into Secure Remote Password beginning on page 58.

squash

@Lars Thank you very much for your quick reply. This document really helps.

Lars

@squash - you're quite welcome! Let us know if you have any questions while going through it. :)