Yes, using 1Password means that you have to trust the developers. Open source would of course be preferable but the open source community has IMHO not managed t

Yes, using 1Password means that you have to trust the developers. Open source would of course be preferable but the open source community has IMHO not managed to provide a comparable suite of apps. Personally, I am more worried about keychains as single points of failure. Some time ago, the 1Password developers tried to explain why you should trust them: http://blog.agilebits.com/2013/09/06/1password-and-the-crypto-wars/ http://blog.agilebits.com/2013/09/06/1password-and-the-crypt... In addition, http://learn.agilebits.com/1Password4/Security/keychain-design.html http://learn.agilebits.com/1Password4/Security/keychain-desi... might be interesting with regard to your question.