"signout --forget" leaves sensitiv data behind

faba
faba
Community Member
edited April 2020 in CLI

Hy,

I played around with the op client on windows and the documentaion states that signout --forget does:

"To sign out of an account and remove its details from your computer:"

but after using it that config file under C:\Users\%USERNAME.op\config still exists which is really a security concern since it contains a lot of sensitiv data and should be removed after using signout --forget

What does it actually remove?

regards

Faba


1Password Version: 0.9.2
_Extension Version:
Not Provided
OS Version: Windows 10 18363
_Sync Type:
Not Provided

Comments

  • faba
    faba
    Community Member

    OK, so the data is removed but the file continues to exists. Kinda confusing but better that keeping it.

  • felix_1p
    felix_1p
    1Password Alumni

    @faba It's possible to use the command line client with multiple accounts, so all that --forget does is remove the account details from the config file but not the file itself.

  • faba
    faba
    Community Member

    @felix_1p Thanks for clearing that up

  • cohix
    cohix
    1Password Alumni

    @faba Of course, please let us know if you have any other questions!

This discussion has been closed.