Standalone vaults in 1Password 8

After the compromise of another cloud based password vault service & the compromise of Authy...I wouldn't recommend cloud based vaults. Furthermore, we would have to rely on the trust of the company to hope it doesn't have a backdoor...which is a serious privacy issue when the vault is located on their cloud servers & not on a home computer. This shouldn't be an issue provided the company is too small to attract the attention of influential government, or large & dedicated to privacy that they would play the cat & mouse game with government hired hackers. Personally, I'd rather keep it on my own system where I can have multiple layers of encryption to protect what I encrypt. This will unfortunately keep me on 1password 7 until the foreseeable future.

I've been a 1Password user since version 4, purchasing new licences as and when required.

But this is where we part ways because I won't be migrating to any online subscription model. I will instead be migrating to alternative software.

See ya.

Hi @ericsh:

Glad to hear you were able to find the survey link. As for your company policy, you (or an appropriate decision maker) can send us an email at business@1password.com, and we'd be happy to dig into it further with you (or the aforementioned decision maker). Thanks for sharing your thoughts!

Jack

So I just read the "What is the future of local/standalone vaults?" post and immediately responded to the poll there, stating I would be most interested in a self-hosting option. I hope it happens!

I'm also a long-time 1Password user who is extremely disappointed with this decision. I do have a 1Password membership (which I'm happy with) but I also use, and absolutely rely on, standalone vaults.

All the arguments about the safety and security of the online vaults are meaningless to me for one very simple reason: my company FORBIDS the use of any third party online storage for their sensitive data. So 1Password 8 is an absolute non-starter for me. Sad.

Thank you for clarifying that.

sj0123

1Password 8 for iOS will not support standalone vaults. More on this can be found in a post from one of our founders, available here:

What is the future of local/standalone vaults?

Ben

Hello
The standalone vault feature that everyone here want is actually still in IOS version of 1password, if I'm correct.
I wonder why it is not supported on other devices.
I'm very happy with 1password.com subscription service, but I think it would be good if you could give users an option to create and manage there own standalone vaults which doesn't automatically sync with 1password server and can be exported in an encrypted form, from the device that has access to that standalone vault, so users can carry it like a file.
Personally I think it is possible since we have standalone vault feature on IPhone, but the situation might be different.
Please let me know if that is the case.
Thanks.
P.S I'm using 1password for IPhone version 7.9.5, which seems to be the latest version.

I moved to 1Password from Keepass on the recommendation of a friend. I had been using KeePass because I could keep my data on my own computer. My friend said I could do that with 1Password AND the user interface was really nice. He was right.

You had reasons for including private vaults when you started 1Password. You even put them on your website. Those reason are still valid. There are passwords in my private vault that will never be stored in a cloud. Never. Never. Never.

I happily paid the monthly fee for your software. I keep most passwords in your cloud and you have to operate it. Operating systems are constantly changing and app changes are needed. Technology moves forward and good software does too.

But removing the single most important feature of your software has destroyed my trust in you. I now see you as a company that can and will arbitrarily do whatever it wants. Companies that lose the trust of their customers eventually disappear.

@Maesitos I'm not sure I understand where you're coming from on this one.

Without a standalone license and access to local vaults you are a step away from being potentially cancelled from your own passwords. 1password might be great and have perfect servers but nothing stops them from blocking the access to their app and/or your data.

This isn't true. Even if we were to cancel your subscription (which would stop updates to your data from syncing between devices), your data is cached locally on your device. To be more specific, your data is cached on every individual device where you have installed the 1Password app and logged in.

The unlock (decryption) process also happens entirely locally, which means that we have no ability to stop you from accessing your cached data. All the decryption happens on your devices, which is by design, for your privacy and security. It is entirely in your hands.

That volatile cache will not cut it for someone that has for example a couple million USD worth of cryptocurrency.

Again, I'm not sure I understand the argument here. If someone is using a standalone vault, that is also a "volatile" cache that can be lost if something happens to the device (and, judging by the stories I've heard from folks in the cryptocurrency world, this happens ... kind of a lot).

If they do keep backups of the "volatile cache", that's sensible. But 1Password already provides the ability to do this automatically by syncing your data between devices and instantiating an individual local database on every device where you're using 1Password.

So to recap:

• Even in situations where someone's account is cancelled, the data remains in the user's hands and we have no way to block access to it
• Decryption happens entirely locally
• We don't hold and don't want to hold the keys that are necessary to decrypt your data
• The 1Password.com service provides automatic syncing between devices, which is a form of data resilience

But feel free to let me know if I'm misinterpreting your objection, or there's something we haven't covered. We take your privacy and security very seriously, and have no interest in making you "dependent" - only secure and in control of your data.