Forum Discussion

dragon1's avatar
dragon1
Dedicated Contributor
28 days ago

Travel Mode - Security Key (and saved within iOS/macOS iCloud Account?!

Hi,

just making up my mind concerning the travel mode?!

If I enable the travel mode how can it help in general, when the secret key is already saved within my vault and/or when it is also saved within my iCloud account?!

Why does Travel Mode help in any way? It's quite easy to access the whole account with every vault, even when Travel Mode is enabled.

Or am I wrong?

discussion
vault management

6 Replies

Sort By
  • 1P_Dave's avatar
    1P_Dave
    Icon for Moderator rankModerator
    25 days ago

    Hello dragon1! 👋

    Thanks for the question! Travel Mode has a very specific use case: if you're stopped for inspection at the border and the border guard compels you to unlock the 1Password app, then they'll only have access to vaults that you've previously marked as "Safe for Travel".

    You can read more about Travel Mode here: Use Travel Mode to remove vaults from your devices when you travel

    Here's an example of how you would use Travel Mode: 

    1. You put items that you need for your trip in a vault and mark that vault as safe for travel.
    2. You turn on Travel Mode and all the other vaults are removed from the 1Password app on your device.
    3. You enjoy your trip knowing that border guards will only ever have access to the "Safe for Travel" vault if they compel you to unlock 1Password.
    4. You come back from your trip and turn off Travel Mode. The rest of your vaults are downloaded back to the 1Password app.


    In step 1, you would choose a vault that doesn't contain your Secret Key or account password as the one to mark as "Safe for Travel". Make sure that you've memorized your account password and stored your Emergency Kit somewhere safe. 

    Let me know if you have any questions. 

    -Dave

    • dragon1's avatar
      dragon1
      Dedicated Contributor
      25 days ago

      Hi Dave,

      thanks for your feedback and the details. I do understand what you mean.

      But in my opinion there is a bug/flaw or security issue at all.

      Example:

      • Travel Mode is active
      • I only have one travel vault active
      • border inspections looks into my vault and sees only the travel vault > everything fine so far
      • border inspection goes within iOS/iPadOS/macOS/... extension to 'settings > integrations > manage integrations' and is directed to my 1Password website into the web GUI with 'full access' to all of my vault's and everything what does exist within my account.
      • so the travel vault is kind of useless

      Correct me if I'm wrong, but it tried it with several systems and everywhere it is the same.
      Full access with no additional confirmation of a password, secret-key and so on.

      Best
      Dragon

      • 1P_Dave's avatar
        1P_Dave
        Icon for Moderator rankModerator
        24 days ago

        dragon1 

        Thank you for sharing your concerns! Travel Mode is designed to prevent the casual discovery of secrets at a border crossing if you're asked to let someone look inside of your 1Password app. 

        Travel Mode is intended to be used for non-web clients because the feature itself is turned on and off within the web client. In cases where a user may be asked to unlock the web client using their account password, Travel Mode can't protect against this scenario. Similarly if a user is asked to unlock the browser extension and use the browser extension to sign into the web client, the same is true.

        That being said, I've shared your feedback with the team internally. They'll continue to look out for further improvements that can be made to features like Travel Mode to make them even more useful for everyone.

        -Dave

        PB-47210899