Local password tresor on usb stick?

Baerliner

Thanks for the reply. 1Password is designed to address that threat model: even if we were to suddenly turn "evil" then we would still be unable to access your data. Your passwords and other items never leave your devices without first being encrypted, and the only thing that exists on our servers is encrypted gibberish that is useless without your account password and Secret Key.

The team has taken great pains to make sure that your data is safe from not only malicious attackers from outside of 1Password but from 1Password itself. If you store data in most clouds then you have to trust the cloud service provider, with 1Password you don't have to trust the cloud service provider since your data is end-to-end encrypted with keys that you control.

Even if the government, or some other party, came to us tomorrow and asked us to decrypt your information, it would be technically impossible for us to do so since we don't know your account password and Secret Key.

-Dave

Hello Dave,
I don't want to get too political now. But governments change. If a government wants to protect your privacy today, things could look very different tomorrow. A government could exert political pressure to gain access to 1password's servers. It could also be that 1password is sold to another company. Maybe even to the Chinese. Even within the company, the company philosophy can change. See the disaster with the interface to the Ledger wallets, where data security concerns were suddenly thrown overboard and a lot of convenience and fancy new features were built in. Unfortunately, I no longer trust anyone when it comes to such important issues as my data security (especially passwords for very sensitive areas). I want only my access to the safe. Only I decrypt the data that is on my stick or my server. No one else. Since that doesn't work with 1password, I have to look for another provider or, as is currently the case, keep my passwords on paper in the safe. Tedious? Sure. But it's a lot safer than shaky IT servers that are located somewhere in the world and whose security decreases year after year in order to save costs. Sorry.

Hello Baerliner! 👋

Thanks for reaching out! Old versions of 1Password used a legacy sync method that would allow you to sync a vault using a file folder. This legacy sync method was deprecated in favour of modern sync using 1Password.com which offers more features, automatic encrypted backup of your items, and is much more secure.

As opposed to the old sync method which only used a single password, data stored in a 1Password account is protected using both your account password and your Secret Key: About your Secret Key

No data ever leaves your device without being end-to-end encrypted: About the 1Password security model

Was there a particular reason why you wanted to use a USB drive to store your vault? While this was something offered in the past, 1Password has moved away from it because of the usability and security limitations that this sync/storage method posed in comparison to modern sync.

-Dave

That seems to be the case. I will change the password manager again. Thank you for your comment

It's the core design of 1Password 8 to have your encrypted vaults stored in the 1Password cloud and have cached copies of these vaults on your local devices for offline access. If you don't want the cloud storage, you've chosen the wrong password manager.