3 ms·
I had different issue with their 'secondary vault' feature. Adding additional vaults as your secondary vaults is not just UI thing. ADDING A SECONDARY VAULT EF
by dr_win 11y ago
I had different issue with their 'secondary vault' feature. Adding additional vaults as your secondary vaults is not just UI thing.
ADDING A SECONDARY VAULT EFFECTIVELY MEANS STORING MASTER PASSWORD OF YOUR SECONDARY VAULT IN YOUR PRIMARY VAULT!
This was confirmed by their support as a reply to my email below. It is better for UX, but it is not explained properly IMO.
Theoretically you could get burnt in scenario when you use personal primary vault with some weak-ish password and add your super-important employer's vault as a secondary vault for convenience. You effectively make super-important vault as weak as your weak-ish master password of your primary vault (without knowing).
My email back in March 2014 (shortened):
I somehow ended up in situation where 1Password pretends to keep my
data safe but does not require password for unlocking secondary vault
as long as I have unlocked the primary vault. If I don't unlock
primary vault and switch to the secondary vault first, the correct
secondary master password is required. [Contrary switching to primary
vault while having unlocked secondary vault requires me to enter
primary master password to unlock it (expected behaviour)]. This
behaviour is exhibited in 1Password.app, 1Password mini and chrome
plugin.
I'm a developer. I have just read all the documentation available on
your site http://help.agilebits.com http://help.agilebits.com just to better understand the
system and reason about it.
And I cannot really explain this behaviour. 1Password should not know
how to unlock my secondary vault without my secondary master password
(unless it caches the master password somewhere behind my back) OR my
secondary agilekeychain file is not really encrypted, but UI pretends
it is, because it requires correct master password (when I go and want
to see the secondary vault without unlocking the primary vault first).
I noticed this behaviour only recently I think originally this worked
just fine. This hiccup could be caused by latest update or my upgrade
to 1Password4 a few months ago.