Blog | 1Password

SECURITY
No, you do not need to change passwords in response to the OpenSSL CCS bugs
by Jeffrey Goldberg Jun 13, 2014
For the third time this year, there is yet another flaw in an underlying security technology used across the net: the recently fixed OpenSSL bugs announced on June 5. For our customers, we are happy to report that 1Password is not affected by bugs in SSL implementations, nor do these bugs require that most people change passwords.
Continue reading
SECURITY
NEWS
Introducing the 1Password Watchtower service for Heartbleed and beyond
by Jeffrey Goldberg Apr 16, 2014
When news of the internet’s Heartbleed bug broke last week, we published what we knew about it and the implications for 1Password and 1Password users. To recap: 1Password is not affected by Heartbleed, but there are steps you need to take to protect your passwords from sites that may have been affected. Today, we’re introducing a new service to …
Continue reading
SECURITY
Heartbleed: Imagine no SSL encryption, it’s scary if you try
by Jeffrey Goldberg Apr 8, 2014
Only two months ago, in the wake of the “goto fail” bug, we had to point out that 1Password’s security does not depend on SSL/TLS. Today, with the far more damaging Heartbleed bug in OpenSSL, we need to tell you the same. 1Password’s technology is not built upon SSL/TLS in general, and not upon OpenSSL in particular. 1Password’s encryption remains …
Continue reading
SECURITY
Large even prime number discovered
by Jeffrey Goldberg Apr 1, 2014
You have probably been taught that two is the only even prime number. But today mathematicians at the University of Southern North Dakota at Hoople have discovered a new, large, even prime. It is more than a million digits long and is equal to the value of 3²²³⁷⁵⁶¹+3¹¹¹⁸⁷⁸¹.
Continue reading
SECURITY
Crackers report great news for 1Password 4
by Jeffrey Goldberg Mar 10, 2014
To understand why this is really good news for us and for 1Password users, it is important to know what “crack” means in this context. I’ll come back round to that and why we encourage the developers of hashcat, John the Ripper, and cryptohaze to take a crack at 1Password. But first, let’s talk about this news and what it says about your password …
Continue reading
SECURITY
1Password security doesn’t depend on SSL
by Jeffrey Goldberg Feb 23, 2014
The security of your 1Password data does not depend on the security of SSL/TLS. 1Password keeps your data encrypted with your Master Password. This means that, even if an attacker is able to intercept the communication between your system and a sync server, they will not be able to decrypt your 1Password data.
Continue reading