Isn't having Password and Key stored in Vault a risk? Would hackers see both?

Hello @Lanny,

Thanks for contacting us with your question, allow me to explain why they are stored in your vault.

On brand new accounts, 1Password leaves a few gifts for our new customers to help them understand 1Password. Instead of signing in and finding an empty vault, you have a few items to help get them started (hence the name). Here's what we create:

Login item (only for the account owner) – Contains the account Username, Password, Sign-in address, and Secret Key.
Identity item – Contains the first name, last name, and email address used during account signup.
Secure note – Contains some helpful links to our support resources and a friendly welcome note.

Having the account credentials stored in your vault is helpful if you forget your account password and/or lose your other account credentials. For example, if you forget your credentials, you can use a device with biometrics to unlock your device and access your credentials.

Only you can reveal your account password. 1Password doesn't store your account password in plaintext, but in order for you to view it, it does need to be decrypted. It's inside your vault, encrypted with both your Master Password and Secret Key.

The reality is that the only way someone could get into your vault would be using the account password. So, since they know it anyway at that point, having it stored inside does not help them at all. It's like keeping a spare key to the safe in the safe: you may want to have one on hand to give to someone if they lose theirs, but you wouldn't want to keep it out in the open. You still need your key to get to it. It's just there for safekeeping.

Along with having your credentials saved as a Login item, I would suggest that you save your details in you Emergency Kit:

1. Click your name in the top right and choose My Profile.
2. Click on the Save your Emergency Kit button. This will prompt you to download a copy of your Emergency Kit.
3. Click Download. The “1Password Emergency Kit” PDF will be downloaded to your Downloads folder.
4. Update the PDF with your account password, in the blank password section. ( If you can not update on the computer, print a copy and manually update it by hand )
5. Print a copy and keep this copy in a safe place. You can also save it to your personal cloud storage, so you always have a digital copy available.

Let me know if this has been helpful at all, I look forward to hearing from you.

Jermaine