Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Secret Key and Recovery Code Best Practices
Any best practice do/don't recommendations for storing secret key and recovery code IF you want make 1password accessible in an "oh **bleep**, I lost my phone" situation?
Your account is always more secure the less you have physical and digital copies of your login credentials. It is also much more difficult for you to access in an emergency situation if you lose everything. How would you store digital and physical copies of the security keys used to log in if you want to prepare for emergency access WHILE avoiding unnecessary security risks?
1. Do you store physical copies of your Secret Key and Recovery Code in the same location?
2. Do you carry either of them with you when you travel?
2. Do you store digital copies of either of those codes in plain text files online?
3. Do you enable multi-factor authentication (MFA) for 1password or keep it off?
1 Reply
- 1P_Tommy
Moderator
I store my Secret Key and Recovery codes within 1Password for ease of use, because a large portion of the time I have access. That's not the only place. They are also kept locally and in a bank safety deposit box. That's for those times when you need access to such details outside of 1Password. I have needed them in the past. Don't overlook this step. They must be accessible and you should not store the keys to the kingdom in just the safe. I use a multi layer approach.
1. My devices. Both inside and outside of 1Password for redundancy.
2. At a relatives home.
3. Additional Owners who can help with recovery.
4. Bank Safety deposit box. The hardest place to access because of time constraints. I tend to rely more on 1-3.
I do not carry them with me when I travel. Depending on your needs you may have other situational questions that you'll have a yes answer here. I have several trusted family members who I can contact in an Emergency and they can provide either to me from any of my backup locations.
Plain text, no never.
Yes! Your needs may vary.
