4 ms·
"To decrypt that data the attacker will need both your Master Password and your Secret Key. A Secret Key is a 128-bit key generated locally on your device, your
by ohyeshedid 7y ago
"To decrypt that data the attacker will need both your Master Password and your Secret Key. A Secret Key is a 128-bit key generated locally on your device, your Master Password is a passphrase set by you. These two keys are combined and, to simplify greatly, used to decrypt your data."
I'm curious how syncing works, specifically in regards to the Secret Key. Seemingly, to me, if the process works as described; I'd need to copy that Secret Key to each device I want to sync, otherwise there'd be no way to decrypt the data on the new device.
What am I missing?
- sjy 7y agoHave a look at ‘Enrolling a new client’ in the white paper linked in the parent comment. The secret key is transmitted to the new device.
- AGKyle 7y agoYou are correct, you'd need to provide the key to each device. To sign in on a new device you need: 1. Your email 2. Master Password 3. Secret Key 4. The URL for the server your data resides on When signing in on a new device we offer a variety of ways to help you do this. 1. Your Emergency Kit, a PDF document, has a QR code that can be scanned on most clients. 2. There's also ways to show the same QR code, or a setup code, within the apps to scan on screen 3. For Apple products we do have a method that saves the Secret Key to the Keychain and can sync via iCloud to help facilitate adding the account to new devices 4. You can always do it manually as well Hope that helps get a better idea of what has to be done there. Kyle 1Password Security Team