Getting started with 1Password for your growing team, or refining your setup? Our Secured Success quickstart guide is for you.
Forum Discussion
Norkz
2 years agoNew Contributor
Will there ever be a CLI option or Connect Rest API to export all account data in .1pux format?
Hello,
Hope you are having a great day.
My goal:
I want to automatically backup my 1password account and export the 1pux file every week automatically.
Issue:
From what I have found ...
Werner85
2 years agoNew Contributor
Norkz after the incident I immediately disconnected my LAN connection. Then I imaged my PC to a backup, and reinstalled Windows. After that I recovered the backup image in a HyperV VM (without internet access).
I am a developer myself, and I suddenly noticed a "python" folder in my %temp% folder. I then also found a "Crypto" folder inside, with some weird looking files. One of the files had a very large encoded string inside.
I decided to alter the code to make it show the decrypted code, instead of executing it. And there I noticed all the classes and methods. One for example was called something like "ExportFirefoxSessions". The script made ZIP files of all Firefox profiles, and then uploaded it to a Discord channel (which was non-existing when I checked) and it uploaded it to some "file" server (which I still need to check).
So I altered the complete code again, to not delete all the files after uploading. And there I discovered a lot of ZIP files which contained my Firefox data, Steam data, Telegram data.
And one session I always keep open is to my e-mail web app. In the Firefox export the "hacker" noticed I was using the 1Password extension, and that probably made him decide to delete my account.
I am still hoping they did not get access to the data itself, but sadly 1Password Support cannot confirm or deny that.
But the worst part was that I had to reply from Support the entire weekend. And all my data was gone, except on my Work laptop. The data remained there (except documents) because I disabled the WiFi before logging in. 1Password then goes into "offline" mode, but you can still access your logins.
This whole situation made me realize that we really need a way to do periodic offline backups, since I don't want to experience this again.