Forum Discussion
Thanks for the reply. 1Password is designed to address that threat model: even if we were to suddenly turn "evil" then we would still be unable to access your data. Your passwords and other items never leave your devices without first being encrypted, and the only thing that exists on our servers is encrypted gibberish that is useless without your account password and Secret Key.
The team has taken great pains to make sure that your data is safe from not only malicious attackers from outside of 1Password but from 1Password itself. If you store data in most clouds then you have to trust the cloud service provider, with 1Password you don't have to trust the cloud service provider since your data is end-to-end encrypted with keys that you control.
Even if the government, or some other party, came to us tomorrow and asked us to decrypt your information, it would be technically impossible for us to do so since we don't know your account password and Secret Key.
-Dave