2 ms·
> What's the password recovery process like with 1Password for family accounts? Short answer: When 1Password creates an encrypted vault, it will make a copy o
by Hackbraten 5y ago
> What's the password recovery process like with 1Password for family accounts?
Short answer:
When 1Password creates an encrypted vault, it will make a copy of the key, encrypt it with the public key of another family member (e.g. you) and hold the encrypted result in escrow on 1Password’s servers.
If your wife forgets her master password and chooses to request recovery, a special procedure starts. First, 1Password asks you to confirm that the request is legit. If you confirm, the server will delete and re-create your wife’s account, then send you her new public key and the encrypted escrow key. Your app uses your private key to decrypt it. (Now your app has your wife’s vault key.) Your app re-encrypts it with her new public key, uploads the result and forgets the key.
Finally, the server sends your wife her encrypted vault together with the thing your app just did. Now your wife can access her vault again.
Long answer: see 1Password’s security white paper [1].
[1]: https://1password.com/files/1Password-White-Paper.pdf https://1password.com/files/1Password-White-Paper.pdf