Aa I understand it, 1Password uses your master password alongside a "secret key": https://support.1password.com/secret-key-security/ https://support.1password.

Aa I understand it, 1Password uses your master password alongside a "secret key": https://support.1password.com/secret-key-security/ https://support.1password.com/secret-key-security/ > Your 1Password account password protects your data on your devices. Someone who has access to your devices or backups won’t be able to unlock 1Password without your account password, which only you know. > Your Secret Key protects your data off your devices. Someone who attempts a brute-force attack on our servers won’t be able to decrypt your data without your Secret Key, which we never have. If I understand this article correctly (and there is a reasonable chance I don't) the PBKDF2 iterations they do on top are little more than security theater.