Is 1Password secure against Erbium malware?

Hi there @06scout

Based on the analysis done here, Erbium does not target 1Password.

While we try to design our software to make it more difficult for malware to attack us, we cannot make any security guarantees when malware is running on a device. If you think your device may have malware, you should seek advice from your device's manfacturer on how best to remove it.

In our Security Design white paper, we say:

Malware that can inspect the memory of your computer or device when the 1Password client has unlocked your data will be able to extract secrets from the 1Password process. Malware that can install a malicious version of 1Password and have you execute it will also be able to extract your secrets. Once malware running on a system has sufficient power, there is no way in principle to protect other processes running on that system.

— section "Malicious processes on your devices", page 74

Please let me know if you have any questions, or would like any further help. :)

— Grey