Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
Former Member
3 years agoQuestion about failed password attempt
Hi, is there such feature in 1password, that if some one tries to guess one’s password to the vault - that the owner of the 1password vault will be notified via email, that an attempt was performed b...
1P_Dave
Moderator
3 years agoHello @Ixoth! 👋
Good question! There isn't an option to have an email be sent to you if someone enters your account password into the app incorrectly. The reason for this is that it wouldn't truly capture all attempts. Your 1Password data is accessible even if you're offline which means that an attacker could just put your iPhone into airplane mode or turn off WiFi/cellular data and then try to guess your password. Since your phone is offline there would be no way for it to communicate to the outside world that someone is trying to unlock 1Password.
And maybe even have captcha enabled (or delay) between subsequent attempts to prevent brute force access to the vault? (Or have the vault locket for a while)?
1Password employs PBKDF2 to protect your data from a brute force attack. You can read more here: How PBKDF2 strengthens your 1Password account password
It's important to remember that an attacker would need both your 1Password account password and Secret Key to log into your 1Password account and decrypt the data within it. And even if they did so, you will receive an email letting you know that your 1Password account has been accessed from a new device, and you'll see that new device listed on your profile (in the top right corner) when logging into and accessing 1Password on the web.
Let me know if you have any questions. 🙂
-Dave