3 ms·
Any time you try to unlock a vault by providing a password, 1Password's infrastructure has to run it (along with other inputs) through 100,000 iterations of a h
by aerotwelve 9y ago
Any time you try to unlock a vault by providing a password, 1Password's infrastructure has to run it (along with other inputs) through 100,000 iterations of a hash function to derive a key. Many password managers nowadays do something like this, because it makes every guess more expensive (linearly I suppose?).
This is, of course, no substitute for a nice long password whose characters are members of the largest alphabet you can think of, but it's something.
I'm not qualified to analyze a security system in detail, but 1Password have published the mechanism they use to secure vaults. You might want to check it out for more details:
https://1password.com/files/1Password%20for%20Teams%20White%20Paper.pdf https://1password.com/files/1Password%20for%20Teams%20White%...