Deleted 'Secret Key' from my 1password database

@fernando91

Thanks for following up. The Secret Key is no longer included in starter items for new 1Password accounts. Because of this, I believe that it's unlikely that a feature to recreate a starter item that includes the Secret Key will be developed. That being said, the feature request is still open with the team.

Copy and pasting, or dragging and dropping, your Secret Key from 1Password into the Secret Key field is the best option. And, once you've logged into 1Password.com in a certain browser once, your Secret Key will be stored and only your account password will be needed for subsequent logins.

Let me know if you have any questions.

-Dave

ref: dev/core/core#3988

@1P_Dave
Thank you for the update.
In terms of the copy/paste vs the drag&drop approach, is there any different in security?

I'm thinking of side-channel attacks that attack the clipboard. (I'm using Win10.)

Hello @fernando91

You are correct that there is a difference, primarily being that by copying passwords to the clipboard you do run the theoretical risk of having another app see the password if they decide to access the information stored in your clipboard.

With drag and drop, you are not saving the item anywhere in plain text, and are using 1Password to fill the item without "storing it" on your machine outside of 1Password to be readily accessible.

That being said, only you can decide what your threat model is and what tools you're comfortable using on your device.

I hope this helps to answer your question about the difference between the two options! If you have any questions or need any clarification on the information above, please let me know.

-Eli