Why does getting a membership feel like a downgrade?

Hi @fabianfabian

I appreciate your concerns. I'd be happy to try and explain.

1) Entering Master Password in the browser

You're right. The browser can be a hostile environment. There are some ways you can help mitigate this. First, you can avoid this entirely if you sign up for an individual 1Password membership inside of 1Password for iOS or 1Password for Android and use Apple or Google for billing. We'd like to bring more of the web app's functionality (e.g. 1st party billing management) to the apps in the future so that it is more feasible for folks with other membership types or those who want to be billed directly can avoid the web app if they so desire.

Second, if avoiding the web app isn't possible (or desirable), there are some reasonable mitigations one can take to make the browsing environment more secure. We'd recommend extreme caution with any browser extensions installed in 1Password. If there are some you just can't live without, consider creating a separate browser profile without them for accessing the 1Password web app.

2) Where are my local back-ups?

This isn't currently available, but is something we'd like to be able to offer in the future. It is something that I personally am strongly advocating for, based on the level of interest in it. When we architected the 1Password membership service we decided that the server should be the "source of truth," rather than the clients. While this has proven to be the correct decision for a number of reasons, it does make restoring a local backup a tricky proposition (though not an unsolvable one, I hope).

As for what is currently available: the 1Password apps always work from a local database, which is then synced with 1Password.com when you're online. This database makes it such that if you (or we) are offline you can still access and modify your data. While this isn't designed to be a "backup," and I'd hesitate to describe it as one, having this database backed up is a reasonable precaution. Because the server is the source of truth the data in it may be overwritten by the server when you connect, but in an absolute worst case scenario you could disconnect from the internet, restore an earlier version of this database, and export your data.

Additionally it is possible to export your data (unencrypted). Again this isn't really a "backup" per se, as the purpose/intention with it is different. The idea with unencrypted exports is to make it feasible to move your data to a different password management solution if you so choose. That said, again, depending on your needs, this could potentially help as a stopgap until/unless more robust offline backups become a reality. We're also looking at adding encrypted exports, which may further this.

I used to consider 1Password incredibly secure because of the way it mitigated against several attacks. If my Dropbox got compromised it doesn't matter because my vaults are encrypted with a master password. If 1Password servers got compromised, it doesn't matter because everything runs locally and does not rely on 1Password servers.

1Password always encrypts your data before saving it to the local database, which happens prior to sync. Your Master Password protects the 1Password data on your computer. With membership, we've added an additional layer of security. Your data is also protected by the Secret Key, and this is the most important protection for the data stored on our servers. You can read more about the Secret Key here:

About your Secret Key

The long and short of it is that it prevents the data on our servers from being valuable. Even if someone were able to dump our entire database it would be infeasible for them to break everyone's individual Secret Keys.

Thank you for your long-time use of 1Password. I hope that helps address your concerns. If there is anything else, please let us know.

Ben

Hi @fabianfabian:

In this case, it feels counterintuitive, but in this case, the Secret Key isn't being sent to the server. my.1password.com (or .ca/.eu) is a web app running inside your browser, and the decryption is not happening on our servers, but instead happening locally on your computer. Our servers never receive your Secret Key or your Master Password as part of the decryption process (and neither do they receive it when they are created, because all of that also happens locally).

The math behind this is the Secure Remote Protocol, if you'd like to learn more, our security white paper talks about the math, in the section SRP starting on page 76.

Jack

@fabianfabian:

I understand the security model, the secret entered in the browser is not sent because you made the assumption that my browser is secure and your webserver has not been compromised.

The idea is actually different. From our documentation:

Your Secret Key protects your data off your devices. Someone who attempts a brute-force attack on our servers won’t be able to decrypt your data without your Secret Key, which we never have.

So the Secret Key actually helps in case our server is compromised.

@fabianfabian:

Ben actually understood and partially addressed this concern and now it is weird that I have to explain it you.

Thank you, but no need to explain it again, I perfectly understand your concern :)

I assume Dropbox is comprised, just as I assume your vault servers are compromised, and I still know I am safe because of the secret key, which has never left my device

That's exactly it: the Secret Key does not leave your device, even if you are entering it in the browser, because you are entering it in a local application running inside the browser, but still on your device. This is where the confusion comes from I think.

Of course, in case you enter information on a compromised website instead, it's an entirely different topic. But even if, as you say, "it is magnitudes harder to compromise the application software than it is to compromise a sign-up or login page", this is a moot point in case your device itself is compromised, for example with a keylogger.

You say in case your (vault) server is compromised it is protected by the secret key, I say I already consider your server compromised and my only protection is the secret key, which is now touched by a browser in the downgraded security model.

The Secret Key is not your only protection: it's the combination of Secret Key and Master Password that protects your data. The Master Password is not sent to us either, so while they both protect you against different scenarios, they also work together so you don't have to rely on a single protection (the Master Password in case your data is hosted on Dropbox).

I hope this clarifies things :)

Correct! And alternatively, as Ben also mentioned, it is always possible to export the data to have an additional copy stored somewhere else:

How to export data from 1Password