Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
Anonymous
4 years agoDon't go to Electron unless you can promise 100% security
If you use the Electron platform how can you ensure that there aren't exploits that will expose my passwords?
You don't have access to the code base in Electron so instead of trusting you folks I ...
roustem
1Password Team
4 years agoThank you for your trust in us, @trinko!
I wanted to say that we did a few things to make sure the new app is more secure than 1Password 7:
- we started performing an external security review of the 1Password 8 codebase from the beginning.
- so far we had several security reviews and plan to continue them as the project develops.
- we designed a logging system to make sure none of the user information is leaked by accident.
- we designed the app architecture to separate the user interface layer from the core where the most critical operations happen. For example, the item detail view process does not even have the value of the password (it only has '*****' asterisks) until you click the Reveal button and at that moment the core send the real value of the password to the view.
- 1Password 8 for Mac is codesigned, sandboxed, and notarized.
@mitch went though some of the work we did to make it more secure in his presentation at NorthSec conference:
https://www.youtube.com/watch?v=_P6qI4ahBVk&t=5110s
Obviously, we are never happy with the current state and we will be looking for more way to make the app more secure.