This is a staging forum for AgileBits, not an official support forum. Visit http://discussions.agilebits.com instead.

Is the note field in the Login box Encypted?

When I create a Login entry in 1Password, I put the Secret Questions and answers that some websites use in the "notes" box in the edit window. (These are the typical questions like "Favorite City", etc.).



However I think I can see this text in the plaintext keychain. Does 1Pasword encrypt the notes field for a Login entry?



My apologies if this has been answered already. I did a search, but didn't turn up anything.

Comments

  • khad
    khad Social Choreographer
    Welcome to the forums, rpk! All your sensitive data is encrypted — including Notes.



    You mention that you "think" you can see it in plain text. Are you able to or are you not able to? Where are you seeing data from your notes in plain text in the file system?



    I'd love to clear the air. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />
  • Thanks Khad, that's reassuring.



    What I meant by "think" is that I was checking the security by running a tool from an internal security group on the database/keychain and getting occasional partial hash matches on my test note text. That tool isn't a confirming test however - it uses hashes to speed up the process and it will report occasional hash collisions as false positives.



    Thank you for your quick reply.
  • khad
    khad Social Choreographer
    Depending on the content of the note(s), you could have been seeing some matches in the metadata of that item or another one stored in the data folder.



    Let me know if you are able to reproduce anything or have any other questions or concerns.