3 ms·
AgileBits is doing the wrong thing here. Dropbox full access is stored on their servers and it's in clear text. Dropbox regular login/password is also stored o
by hartator 10y ago
AgileBits is doing the wrong thing here.
Dropbox full access is stored on their servers and it's in clear text. Dropbox regular login/password is also stored on their servers, but encrypted via a remote master key.
If AgileBits is compromised, they can access all your DropBox files. Attackers still can't access regular login/password because of the lack of master keys.
- mcgrath_sh 10y agoHow is Dropbox access stored on AgileBit servers? I buy an app license. I then set up a vault in a Dropbox folder just like a local folder. I use 1Password to access that vault. Same goes for the iOS app. If the worry is iOS, one should assume that every iOS app company that uses Dropbox has a copy of your Dropbox creds on their server, correct? It is my understanding that at no point, does AgileBits store my Dropbox creds. It also does not store my 1Password vault.
- alphabettsy 10y agoAlmost everything you just said is incorrect. You don't even enter your dropbox password into the app unless you're storing it as a credential, they present an authentication dialogue for the dropbox API just like all other third-party apps accessing Dropbox and store the OAuth key on the client. Not the server. That's why you have to re-authenticate with dropbox on every device you want to set up 1Password sync.