>1Password, for example, extensively details their client-side encryption protocol. Unless they were forced to distribute a compromised client Not particularly

>1Password, for example, extensively details their client-side encryption protocol. Unless they were forced to distribute a compromised client Not particularly familiar with the methods 1Password uses, but that is the general theory. It's pretty out there and you'd likely have to be in pretty deep for a government (or some other attacker) to try and pull something like that (especially just to hit you personally). There's similar pie in the sky arguments for most software on your computer that will auto update as well I suppose (Windows Update, Google Chrome, whatever...). I don't think it's a realistic concern for most people, but if your life (or your freedom) depended on your password manager you'd want the least amount of points of failure possible.