Blog | 1Password

SECURITY
Heartbleed: Imagine no SSL encryption, it’s scary if you try
by Jeffrey Goldberg Apr 8, 2014
Only two months ago, in the wake of the “goto fail” bug, we had to point out that 1Password’s security does not depend on SSL/TLS. Today, with the far more damaging Heartbleed bug in OpenSSL, we need to tell you the same. 1Password’s technology is not built upon SSL/TLS in general, and not upon OpenSSL in particular. 1Password’s encryption remains …
Continue reading
SECURITY
Large even prime number discovered
by Jeffrey Goldberg Apr 1, 2014
You have probably been taught that two is the only even prime number. But today mathematicians at the University of Southern North Dakota at Hoople have discovered a new, large, even prime. It is more than a million digits long and is equal to the value of 3²²³⁷⁵⁶¹+3¹¹¹⁸⁷⁸¹.
Continue reading
SECURITY
Crackers report great news for 1Password 4
by Jeffrey Goldberg Mar 10, 2014
To understand why this is really good news for us and for 1Password users, it is important to know what “crack” means in this context. I’ll come back round to that and why we encourage the developers of hashcat, John the Ripper, and cryptohaze to take a crack at 1Password. But first, let’s talk about this news and what it says about your password …
Continue reading
SECURITY
1Password security doesn’t depend on SSL
by Jeffrey Goldberg Feb 23, 2014
The security of your 1Password data does not depend on the security of SSL/TLS. 1Password keeps your data encrypted with your Master Password. This means that, even if an attacker is able to intercept the communication between your system and a sync server, they will not be able to decrypt your 1Password data.
Continue reading
SECURITY
Your Master Password is your defense from Dropbox breaches, real and imagined
by Jeffrey Goldberg Jan 12, 2014
Rumors of a Dropbox data breach spread this weekend, a breach that ultimately turned out to be false. But even in instances of false alarms, it is useful to remind 1Password users that their 1Password data cannot be decrypted without the Master Password. So let me take this opportunity to remind everyone that your 1Password data cannot be decrypted …
Continue reading
SECURITY
IOS
The NSA can do what to my iPhone?
by Jeffrey Goldberg Dec 31, 2013
After Der Spiegel, along with Jakob Appelbaum at the 30th meeting of the Chaos Computer Club, published an astonishing trove of documents revealing a great deal of the extent of their penetration of the network and capabilities to install spying mechanisms into individuals’ computers and devices, one of the least significant documents is getting …
Continue reading