Is any of my information stored locally in Windows 7 with a 1Password.com account?

@Brian_S2: That's a really good question, since it sounds like this is not a machine you own or control completely. There are two ways of looking at this:

Using the 1Password.com web interface

In this case, you data is stored only on the server. It is decrypted and cached only temporarily in the browser as you access items in your vault, but once you logout (or even reload the page), it is no longer accessible.

The one thing you need to be aware of is a little checkbox on the 1Password.com sign in page, which states "This is a public or shared computer". If you leave that unchecked, your Secret Key will be saved in the browser's local storage. You may want to check this box to prevent this from happening on a computer you don't control.

Using the native 1Password app

Here 1Password caches a copy of the encrypted database locally, so you can access it even while offline, when you sign in and authorize the app. There isn't a facility for a "one time login", but you can sign out at any time if needed. I do this when traveling.

So while in this case 1Password is storing data on the device, it is encrypted until you both enter your Master Password to unlock and access an item. Unlocking does not decrypt the entire database at once, only individual items on demand. However, if someone else owns the machine, they may have the ability to capture keystrokes or your data as you access it.

Mitigating circumstances

While someone who is able to obtain your Secret Key from the device/browser will also need to learn your Master Password to be able to access your data/account, if you have reason to believe that there has been a compromise, you have a couple options:

• You can deauthorize individual devices
• Your Secret Key can be regenerated

You can do this on your Profile page at 1Password.com. better safe than sorry.

A final note of caution and hope

Generally we recommend against accessing sensitive data on an untrusted device, as its owner may be able to monitor and collect data as you access it. This applies to all of the above, and ultimately you'll be the best judge of how to proceed. It's your data after all.

But the good news is that a 1Password.com membership allows you to use 1Password on all of your devices, so while not as convenient as using it on a work computer, if you perceive that as being a threat, you can always access your sensitive data on a mobile device of your own that you carry with you.

And last but not least, your 1Password data is encrypted locally, so whether you access it on your work or personal device, nothing is transmitted in the clear, and 1Password isn't relying on the security of the network or TLS/SSL to secure your data either. And since the keys used to encrypt it (your Secret Key and Master Password) are never transmitted, someone capturing your encrypted data from our server, during transmission, or cached on your device will not be able to decrypt it.

I hope this helps. Be sure to let me know if you have any other questions! :)

You're welcome, @Brian_S2 and thank you for your praise, we aim to please :)

Now if there's anything else we can help you with, feel free to ask.

Cheers and have a great weekend.

Alex