Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
dragon1
1 hour agoDedicated Contributor
Secret Key unencrypted within browser developer settings - normal behavior?
Hi there,
today I found out, when I go into my developer section of any of my browsers I found out, that 1Password does store a lot about your account:
- mail-address
- username
- vault name
- creation date of account
- userUUID
- using something like Fastmail-extension within 1Password
- ... and much much more
And I also found out, that the Secret Key is stored there unencrypted and visible for anyone with access to this machine (and browser).
Even when 1Password is locked, this information is available.
How to find it? Just go into developer mode of any browser, search there for the extension and look at databases > accounts > a_by_uuid
Is this 'normal' behavior? Within your security white paper you're talking about that it is stored encrypted on all computers. But why is it shown here in clear text?
No RepliesBe the first to reply