4 ms·
About 10-15 years ago they were behaving the same way. I made a post in their forums complaining that their on disk file storage left your list of domain names
by eduction 4y ago
About 10-15 years ago they were behaving the same way.
I made a post in their forums complaining that their on disk file storage left your list of domain names in cleartext so someone with access to your files could see where you have accounts, which reduced the benefit of them encrypting the actual passwords, something they made a big deal about in their marketing.
They moved the post from the high traffic forum section about 1Password to an obscure forum section about random topics. (Their justification for leaving the domains in cleartext was that it was needed to make the browser extension work.)
I still use the product but the company is flawed. They are just less flawed than others.
- TheNewsIsHere 4y agoAs someone who has had professional involvement with them, I was thinking about this the other day. I would summarize them exactly the same way. When it comes to security and privacy in cryptographic terms, they seldom make a misstep. They rightly uphold Kerckhoff’s principle. They do the most important technical things right and reliably. They deserve credit for that. When it comes to all of the soft/human/marketing/product management decisions, they have some really bad calls under their belts. They deserve criticism for that.