True! So you have to choose a good master password and use an expensive hash. On the other hand, if you take any other approach, you place either confidence in

True! So you have to choose a good master password and use an expensive hash. On the other hand, if you take any other approach, you place either confidence in the security of a service (1password), or you store passwords somewhere. In both cases, you have a problem when you can not retrieve the passwords anymore. If 1password is hacked or simply offline, or your phone gets stolen, you basically lost access to all services.