When will 1P7 be EOL?

Hi @JC_Denton,

Thanks for asking. The short version we simply don't have an answer on what future support for 1Password 7 will look like after 1Password 8 has been launched on all platforms. What I can provide as an example is after the launch of 1Password 7 for Mac, 1Password 6 for Mac received zero updates, security or otherwise. While past behavior doesn't define the future, it certainly can be helpful. As for using 1Password on iOS, 1Password 8 for iOS will be a separate app in the App Store from the currently available 1Password 7 app.

Additionally, we can't guarantee that functionality will continue to remain as expected as operating systems and browsers make updates. For example, if iCloud or Dropbox were to make a change that we haven't accounted for, syncing may not function as intended.

To touch on your concerns about the integrity of your data:

1. 1Password always works from a local copy of your data. Data you enter is encrypted before it is saved into this local database. The database is stored on your computer, and syncs when you are online. This means you can access your data while you're offline (or in the event that we are offline).

2. The Secret Key - This is explained more fully in our security white paper, but the short explanation is that if someone were to guess or bruteforce your account password, that still wouldn't be enough to get your data. The Secret Key provides a serious safeguard against this, and the mathematical complexity that it puts in an attacker's path is essentially insurmountable with current attack methods and hardware. It makes it such that even if someone could steal everything from our servers, they wouldn't be able to access any secrets you've stored in 1Password. This key is not available to us, either, so even in the case of a malicious employee with the highest levels of access, your data is protected.

3. We put our trust in encryption rather than authentication. This is because, in short, "Encryption means that 1Password does not face the kinds of threats a largely authentication-based system would face, and we have used an authentication mechanism that defends against many of the threats faced by many other systems." You can read more about this, if you're interested, in our short guide here: https://support.1password.com/authentication-encryption/

4. We undergo security audits and pen tests, which you can find here: https://support.1password.com/security-assessments/

Jack

following this

Hi @"jack.platten",

Thanks for the info!

I understand and appreciate the encryption aspect. I think this is fine for quite a few types of personal and sensitive data. My 1Password data is at a higher tier than those. It is often going to be the case that my 1P data enables access to those other data stores. It is the proverbial, "keys to the kingdom." For that reason alone, I prefer to keep the data on systems I fully control. It's unclear who has access to my data files that I elect to sync with 1Password's servers if I go with a subscription. Some 1Password employees, sure, but are there other vendors involved? Can you guarantee that my data is purged when I choose to purge it? If you're compelled to release my data, you'll likely have to do so (even if it is extremely unlikely)... Again, all these arguments favor keeping my credentials data locally. Yes, it's encrypted, and yes, it's unlikely to be broken anytime soon. It's just a level of comfort I have with where I keep my data stored. I'm sure quite a few others agree as well. I genuinely hope 1Password implements the self-hosted option. I'd be happy to pay for a subscription to maintain local control of my data.

@Hybrid:

Thank you for the interest! For future reference, you can subscribe to a conversation by clicking on the little star symbol at the top right of the discussion ;)

@JC_Denton:

It's just a level of comfort I have with where I keep my data stored.

We totally understand :+1: And thank you for filling in the self-hosting survey!