Skip to main content
Enceladus
February 27, 2025
Solved

Internet Access Policy outdated?

  • February 27, 2025
  • 3 replies
  • 383 views

Hi there,

I use Little Snitch on my Mac to track internet connections made by apps on my machine, and alert me when they start doing something different. This morning I received alerts about two unknown connection attempts by 1Password to the following hosts:

  • app-updates.us.svc.1infra.net
  • 3.232.154.196

The 1Password app contains an https://www.obdev.at/iap/index.html  to document and explain the connections it makes, but neither of the connections above are listed in it.

Given the sensitivity of data stored in 1Password, it's important that any possible data flows outward from within the secure environment of the app be well-understood.

Can someone on the 1Password team explain what these connections are used for, and hopefully ping whatever internal team manages the IAP so it can be brought up-to-date?

Best answer by 1P_Dave

Thank you for reaching out! Our 1Password ports and domains article has now been updated to include the app-updates.us.svc.1infra.net subdomain. The subdomain is part of 1Password's normal operation and is used to provide 1Password app updates.

The team is working to update our Internet Access Policy with this information as well.

-Dave

3 replies

1P_Dave
1Password Employee
February 27, 2025

Hello @Enceladus! 👋

Thank you for reaching out! The domain that you're seeing is part of an ongoing internal migration to new infrastructure for the app-updates service. This change will have no impact on the 1Password app's functionality or security.

The team is working to update both our website, as well as our Internet Access Policy, to document this subdomain going forward. I'm sorry for any confusion or alarm. 

-Dave

Enceladus
EnceladusAuthor
February 27, 2025

Good news, thank you @1P_Dave! Best of luck with the migration.

1P_Dave
1Password Employee
February 28, 2025

Thank you! And thanks again for reporting the issue. 

-Dave

March 12, 2025

Good catch! Keeping the IAP updated is super important for transparency. Hopefully, the 1Password team can clarify what these connections are for.

1P_Dave
1P_DaveAnswer
1Password Employee
March 12, 2025

Thank you for reaching out! Our 1Password ports and domains article has now been updated to include the app-updates.us.svc.1infra.net subdomain. The subdomain is part of 1Password's normal operation and is used to provide 1Password app updates.

The team is working to update our Internet Access Policy with this information as well.

-Dave