Skip to main content
October 30, 2021
Question

Seeing stranger's account on my 1PW login page!

  • October 30, 2021
  • 6 replies
  • 369 views

This has never happened before:

On a private computet, bitlockered, no one has ever touched it. Deepest apologies if I missed something non obvious but who is Ronish?


1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided

6 replies

October 30, 2021

This still shows on the bottom of my page. It will ask me for secret key, password, etc but it is very concerning that another family's vault name is showing up on my account. It makes me concerned that my info may be coming up on someone else's computer.

The link for that Ronish Family is : https://my.1password.com/signin?a=ZGKBBV6QHJFQVENW3W372C6JXQ

1P_PeterG
1Password Alum
October 30, 2021

Hi @mia, thank you for bringing this up. I have passed the issue to our security team so we can figure out what might be going on here. Thank you again for notifying us!

1Password Employee
November 1, 2021

@mia

I've spoken with our security team on this. We're going to need some additional details in order to investigate further. Could you please shoot us an email from the email address associated with your 1Password account? Please send the message to support+forum@1password.com, which will generate an auto-reply from BitBot with a support ID. Once you have that support ID, please post it here. That will enable us to 'connect the dots' and locate your account details.

Thank you.

Ben

November 2, 2021

@1P_Ben @1P_PeterG Here's the BitBot ID:
[#GPT-74586-711]

It still says Ronish's Family on my 1PW (I left it alone so your support can look at it)

With this link:
https://my.1password.com/signin?a=ZGKBBV6QHJFQVENW3W372C6JXQ

1Password Employee
November 2, 2021

Thanks @mia. Our security team is investigating.

Ben

ref: GPT-74586-711

November 4, 2021

Hey @mia -- I've replied to your email. Since we don't discuss details of users' accounts or billing on this public forum where the entire world can see it, let's keep any further communication happening over private email.

To be clear for anyone else reading this thread, it's not possible to simply sign into other users' accounts - or them into yours. At a minimum, your Account Password is required, along with your registered email address and your https://support.1password.com/secret-key-security/, on new devices/browsers.