Community ManagerHi @willmize
First, I'd like to say: welcome to the 1Password community! Although of course we wish it was under less fraught circumstances. In any case, we're happy to help from here. 👋
How safe am I, seeing that I have the same passwords as before, but a different minder?
A great question! Let's start with a general look at how security works in 1Password, and then we'll move to specific advice.
1Password Security: A High-Level View
First, I should mention that the security of your items in 1Password, assuming no prior compromise of the data, is very high. We could chat endlessly about security (and sometimes do! 😃) but as a quick overview, the two primary elements that secure your data in 1Password are:
These two are combined to jointly encrypt your data, and they serve two complementary purposes.
Your Secret Key protects your data when it's off your devices. For example, let's say that some hacker attacks our servers in an attempt to make off with your data. Even if they did so, it would be essentially impossible for them to break open your personal 1Password database, because this isn't mathematically feasible without knowing the Secret Key (which only you have).
Meanwhile, your account password protects the data that's on your device. So if someone makes off with your laptop while you're vacationing in Maui, that's the primary element that stands in the way of them being able to get at your data - which is why choosing a strong password is important.
Now, to return to your question at the specifics level:
What to Do Next
How safe am I, seeing that I have the same passwords as before, but a different minder? I get the feeling "not very".
Given that your data was involved in a breach, the answer is indeed "not very."
If I'm unsafe as heck, do I need to change every single password in my current 1Password vault?
I'll offer the same advice here that I'd give to a family member: assume that anything that was in your old vault is compromised. Change your passwords for everything, starting with the most important accounts.
If I have to change all several hundred of them, what is the easiest and most efficient way to do this?
I wish we had a magic workflow to offer here (and we're always looking for ways to improve this, by the way). The best I can suggest is the following:
And so on, for any relevant accounts.
Our how-to guide is here: https://support.1password.com/generate-website-password/
I hope this is helpful. Again, sorry that this situation is something you find yourself impacted by, but we're happy to assist with the next steps in any way we can.
