Question about failed password attempt

Hello @Ixoth! 👋

Good question! There isn't an option to have an email be sent to you if someone enters your account password into the app incorrectly. The reason for this is that it wouldn't truly capture all attempts. Your 1Password data is accessible even if you're offline which means that an attacker could just put your iPhone into airplane mode or turn off WiFi/cellular data and then try to guess your password. Since your phone is offline there would be no way for it to communicate to the outside world that someone is trying to unlock 1Password.

And maybe even have captcha enabled (or delay) between subsequent attempts to prevent brute force access to the vault? (Or have the vault locket for a while)?

1Password employs PBKDF2 to protect your data from a brute force attack. You can read more here: How PBKDF2 strengthens your 1Password account password

It's important to remember that an attacker would need both your 1Password account password and Secret Key to log into your 1Password account and decrypt the data within it. And even if they did so, you will receive an email letting you know that your 1Password account has been accessed from a new device, and you'll see that new device listed on your profile (in the top right corner) when logging into and accessing 1Password on the web.

Let me know if you have any questions. 🙂

-Dave