Signing back into the Community for the first time? You'll need to reset your password to access your account. Find out more.
Forum Discussion
Solved
Session Key Enhancement Suggestion
Hi, Regarding the Disney Employee attack (see Lounge post "Did 1Password get hacked? The Disney Employee said hackers got into his 1password account."), a commenter suggested that 1P was illicitly a...
Hey Mike,
I totally understand the concern, and I appreciate you bringing this up! The key thing to note here is that in this particular case, the attacker compromised the individual’s entire device.
Once a device is compromised (e.g., via a keylogger or other malware), an attacker can intercept anything the user types, including their Master Password. That means they could log in and access data just as the legitimate user would. At that point, security measures within 1Password can’t override the fact that the attacker essentially has full control of the device.
To help protect against this type of attack, the best defense is keeping devices secure by installing updates, enabling built-in security protections, and using endpoint protection tools to detect and block malware.
For more details on how 1Password protects information on your devices (and when it can’t), I would recommend reading our blog linked below. 👇
🔗 How 1Password protects information on your devices (and when it can’t)
1P_Blake
Community Manager
Community ManagerHey Mike,
I totally understand the concern, and I appreciate you bringing this up! The key thing to note here is that in this particular case, the attacker compromised the individual’s entire device.
Once a device is compromised (e.g., via a keylogger or other malware), an attacker can intercept anything the user types, including their Master Password. That means they could log in and access data just as the legitimate user would. At that point, security measures within 1Password can’t override the fact that the attacker essentially has full control of the device.
To help protect against this type of attack, the best defense is keeping devices secure by installing updates, enabling built-in security protections, and using endpoint protection tools to detect and block malware.
For more details on how 1Password protects information on your devices (and when it can’t), I would recommend reading our blog linked below. 👇
🔗 How 1Password protects information on your devices (and when it can’t)
