Blog | 1Password

SECURITY
Shellshock is bad, unique passwords are good
by Jeffrey Goldberg Sep 30, 2014
A new security bug, commonly known as Shellshock (Officially CVE-2014-6271, is bad. It is fair to say that a large number of servers (particularly web servers) were vulnerable to serious attack for some time. It is likely that many still are, and we are unlikely to learn about most of them.
Continue reading
SECURITY
Watch what you type: 1Password’s defenses against keystroke loggers
by Jeffrey Goldberg Aug 21, 2014
I have said it before, and I’ll say it again: 1Password and Knox cannot provide complete protection against a compromised operating system. There is a saying (for which I cannot find a source), “Once an attacker has broken into your computer [and obtained root privileges], it is no longer your computer.” So in principle, there is nothing that …
Continue reading
IOS
Filling with your approval: On 1Password’s App Extension and iOS 8 security
by Jeffrey Goldberg Aug 14, 2014
iOS 8 has an incredible feature coming called App Extensions, and we’re thrilled to say we have a 1Password extension ready for developers to use right in their apps! In apps that gain support for our extension, you will no longer have to copy and paste passwords from 1Password. Yes, it really is a game changer, and you can see it in action for …
Continue reading
SECURITY
1Password is a very safe basket
by Jeffrey Goldberg Jul 16, 2014
When you use a password manager, you are putting a great deal of valuable and sensitive information in one place. The expression, putting all your eggs in one basket is apt. When you put all your very valuable eggs in one basket, it is absolutely fit and proper to ask how secure that basket is.
Continue reading
SECURITY
No, you do not need to change passwords in response to the OpenSSL CCS bugs
by Jeffrey Goldberg Jun 13, 2014
For the third time this year, there is yet another flaw in an underlying security technology used across the net: the recently fixed OpenSSL bugs announced on June 5. For our customers, we are happy to report that 1Password is not affected by bugs in SSL implementations, nor do these bugs require that most people change passwords.
Continue reading
SECURITY
NEWS
Introducing the 1Password Watchtower service for Heartbleed and beyond
by Jeffrey Goldberg Apr 16, 2014
When news of the internet’s Heartbleed bug broke last week, we published what we knew about it and the implications for 1Password and 1Password users. To recap: 1Password is not affected by Heartbleed, but there are steps you need to take to protect your passwords from sites that may have been affected. Today, we’re introducing a new service to …
Continue reading