Skip to main content
A
Anonymous
October 7, 2021
Question

Data when 1Password is unlocked

  • October 7, 2021
  • 3 replies
  • 160 views

Hello, I am using the 1Password chrome extension and have read through the security documentation of the product (which is very impressive)

One thing I am wondering though is where the unencrypted data is stored after you unlock your vault using the master password? For example, once you unlock your vault, you are able to search the extension for any items which have been decrypted for a certain amount of time without having to re-enter the master password again.

Is the unencrypted data stored in the memory of the chrome extension until it auto locks again? Is the master password stored somewhere temporary in order to decrypt the data again without prompting the password? I'm wondering about the level of security at this stage of using the application so any information about how this is done safely would be much appreciated!

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

3 replies

A
Anonymous
October 10, 2021

Hey @Nexxus ,
Thanks for taking the time to read our security documentation, which I assume https://1password.com/files/1Password-White-Paper.pdf was a part of, as well as http://https://support.1password.com/1password-browser-security/

The extension and the data in it are running in a sandboxed environment provided by the browser's API, which means webpages and other extensions are not able to access its local data whether encrypted or decrypted.

However, if your computer is compromised and someone has access to your RAM and/or hard drive, they will be able to read the decrypted information.
Your Master Password is not stored anywhere on your computer so it will remain safe, but a decrypted app/extension are vulnerable to direct access of a compromised system.

A
Anonymous
October 10, 2021

Hi @ag_yaron thanks for your response, this helps clear up my question! So the data will be stored locally but within the sandbox environment, is the actual file that is encrypted and containing the info decrypted, or is the decrypted info just held in the local data store?

A
Anonymous
October 11, 2021

Glad I could help.

The database file is encrypted in the browser's local storage, and then decrypted in the same place when you unlock the extension.

Terms & ConditionsAccessibility statement

©2026 1Password. All rights reserved.
4711 Yonge St, 10th Floor, Toronto Ontario, M2N 6K8, Canada