Forum Discussion

BobW's avatar
BobW
Dedicated Contributor
4 years ago

Safari IndexedDB bug and 1P

Hello, Can you please tell us how 1P is impacted by the IndexedDB leak bug in Safari? Thank you. 1Password Version: Not Provided Extension Version: Not Provided OS Version: Not Provi...
browser extension
Jack_P_1P's avatar
Jack_P_1P
Icon for 1Password Team rank1Password Team
4 years ago

Hey BobW:

Thanks for checking on this! We’ve been keeping an eye on this as well. We found that a malicious site taking advantage of the IndexedDB bug could learn that 1Password in the browser (the Safari extension available for macOS or iOS/iPadOS) is in use, but would not learn any specifics about your 1Password account or what is stored in your 1Password account. When you use the extension in Safari, the bug can be misused to learn you are a 1Password user or not, but nothing else.

The 1Password.com web interface, and the apps themselves are not affected by this issue. They don’t use IndexedDB.

At the time of posting, Apple has yet to update Safari to address the issue, but keep an eye out and update as soon as you can!

Jack