Skip to content

Comment on You have secrets; we don’t. Why our data format is publicparent

Comments

   ~/Library/Application Support/1Password/1Password.agilekeychain/data/default/
Only the password itself is encrypted. Everything else is just sitting there in JSON.
   ~/Library/Application Support/1Password/1Password.agilekeychain/a/default/files
The attached files do appear to be encrypted, but I don't know how well. The names of the files aren't however, and they may be enough to expose or incriminate you.

Thanks for the paths. I've made some entries and checked what gets encrypted and seems some items in addition to the password are encrypted.

I'm seeing the 'Username' and 'Note' fields for example, for Login items as encrypted.

I found a summary[1] of why/what gets encrypted under "Individual Entry Contents".

[1]: http://help.agilebits.com/1Password3/agile_keychain_design.h...

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.