4 ms·
> Good tutorial. This is why I prefer 1Password, as it requires the secret key to be compromised in addition to the Master Password, thus providing protection a
by nix23 4y ago
> Good tutorial. This is why I prefer 1Password, as it requires the secret key to be compromised in addition to the Master Password, thus providing protection against a weak master password.
Do you know that or do you just hope they do what you think they do?
- massysett 4y agoUltimately I trust that they do as they say, which is necessary to any modern computer use. The same way that I have to trust that my OS vendor is not stealing everything I have.
- nix23 4y agoYes true, attack surface is already big enough, lets upload our passwords into the cloud...cant be much worse...oh wait...
- xvector 4y agoIt's literally part of the vault creation flow.
- nix23 4y agoSure you think that, but is it the reality?
- mdaniel 4y agoThey do what any reasonable security company does, and call in vendors who have negative incentive to lie: https://support.1password.com/security-assessments/ https://support.1password.com/security-assessments/ I was especially impressed by the Cure53 ones, where they were provided access to the source code: https://bucket.agilebits.com/security/Cure53-1PW18-report.pdf https://bucket.agilebits.com/security/Cure53-1PW18-report.pd...