This is a staging forum for AgileBits, not an official support forum. Visit http://discussions.agilebits.com instead.

DropBox Security?

sunnygal
sunnygal
edited July 2011 in Android
I'm new to Android and been using 1Password for a few years. From Members used to it, in your opinion, how safe is it for me to use for my 1 Password? I can't find anywhere what the encryption is on DropBox which was the deciding factor in my choice of 1 Password "back when". I also downloaded 1 Password for my Nexus S 4G but it's just sitting there. Does it really work to transfer my passwords over? Which is better or do you have to use both? (Yes, I'm a novice.)



Thanks [i] <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/unsure.gif' class='bbc_emoticon' alt=':unsure:' /> [/i]



SG
Flag

Comments

  • [Deleted User]
    [Deleted User]
    [quote name='sunnygal' timestamp='1311174897' post='32432']

    I'm new to Android and been using 1Password for a few years. From Members used to it, in your opinion, how safe is it for me to use for my 1 Password? I can't find anywhere what the encryption is on DropBox which was the deciding factor in my choice of 1 Password "back when".

    [/quote]



    Hello sunnygal and welcome to the Forums!



    As we've discussed in other ares of the Forums (Mac, Windows, etc.) Dropbox security is a big part of 1Password!



    For more details on Dropbox security and 1Password integration, you may be interested in reading a Blog post from AgileBits security guru, Jeff Goldberg: [url="http://blog.agilebits.com/2011/04/dropbox-security-questions/"]Dropbox Security Questions[/url]



    [quote]

    I also downloaded 1 Password for my Nexus S 4G but it's just sitting there. Does it really work to transfer my passwords over? Which is better or do you have to use both? (Yes, I'm a novice.)

    [/quote]



    As I've just recently started using the Android app, I want to be sure you receive an enlightened response. So, I've passed these questions over to one of our Android experts who can give you a better answer. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />



    Cheers!



    Brandt
    Flag
  • GeneY
    GeneY AWS Team
    Hello sunnygal,



    Welcome to 1Password for Android Forum and thank you for raising such an important question about 1Password data security.



    Of course, AgileBits security guru, Jeff Goldberg will provide detailed answers on your question, I'd like just to add that while such a thing as absolute security doesn't

    exist by definition, 1Password's security is as best as it can possibly be considering current level of knowledge and technology.



    I want to notice that 1Password reader doesn't store your Master Password anywhere on the phone, not even in the most secure application properties. The application simply moves your secure keychain (all data encrypted) from your Dropbox storage to the phone's SD card (assuming you provided valid Dropbox username and password).



    Until you provide a valid Master Password (the same that you use on your PC/Mac), your private data stays encrypted and cannot be accessed by anybody even if it is accessed by some unwanted person.Once you exit the application, all application data is erased from the memory and Master Password is required again in order to see your data.

    Once you Master Password is of sufficient strength, you have absolutely nothing to worry about in terms of security.



    Please let me know if you need an additional information, I will be glad to assist you further.



    Best regards,

    Gene

    Android developer <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/rolleyes.gif' class='bbc_emoticon' alt=':rolleyes:' />





    [quote name='sunnygal' timestamp='1311174897' post='32432']

    I'm new to Android and been using 1Password for a few years. From Members used to it, in your opinion, how safe is it for me to use for my 1 Password? I can't find anywhere what the encryption is on DropBox which was the deciding factor in my choice of 1 Password "back when". I also downloaded 1 Password for my Nexus S 4G but it's just sitting there. Does it really work to transfer my passwords over? Which is better or do you have to use both? (Yes, I'm a novice.)



    Thanks [i] <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/unsure.gif' class='bbc_emoticon' alt=':unsure:' /> [/i]



    SG

    [/quote]
    Flag
  • GeneY
    GeneY AWS Team
    Hello sunnygal,



    Welcome to 1Password for Android Forum and thank you for raising such an important question about 1Password data security.



    Of course, AgileBits security guru, Jeff Goldberg will provide detailed answers on your question, I'd like just to add that while such a thing as absolute security doesn't

    exist by definition, 1Password's security is as best as it can possibly be considering current level of knowledge and technology.



    I want to notice that 1Password reader doesn't store your Master Password anywhere on the phone, not even in the most secure application properties. The application simply moves your secure keychain (all data encrypted) from your Dropbox storage to the phone's SD card (assuming you provided valid Dropbox username and password).



    Until you provide a valid Master Password (the same that you use on your PC/Mac), your private data stays encrypted and cannot be accessed by anybody even if it is accessed by some unwanted person.Once you exit the application, all application data is erased from the memory and Master Password is required again in order to see your data.

    Once you Master Password is of sufficient strength, you have absolutely nothing to worry about in terms of security.



    Please let me know if you need an additional information, I will be glad to assist you further.



    Best regards,

    Gene

    Android developer <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/rolleyes.gif' class='bbc_emoticon' alt=':rolleyes:' />





    [quote name='sunnygal' timestamp='1311174897' post='32432']

    I'm new to Android and been using 1Password for a few years. From Members used to it, in your opinion, how safe is it for me to use for my 1 Password? I can't find anywhere what the encryption is on DropBox which was the deciding factor in my choice of 1 Password "back when". I also downloaded 1 Password for my Nexus S 4G but it's just sitting there. Does it really work to transfer my passwords over? Which is better or do you have to use both? (Yes, I'm a novice.)



    Thanks [i] <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/unsure.gif' class='bbc_emoticon' alt=':unsure:' /> [/i]



    SG

    [/quote]
    Flag
  • brenty
    brenty
    Gene and Brandt are correct, but I just wanted to add (in case it was missed) that your sensitive 1Password data is encrypted using your Master Password before it even leaves your computer.



    I have been using Dropbox for a while now, and I am not sure how I lived without it. Between all of my devices, the thought of keeping everything in sync manually makes me cringe. <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/wink.gif' class='bbc_emoticon' alt=';)' />



    If you have any other questions, just ask. We are always here to help! <img src='http://forum.agile.ws/public/style_emoticons/<#EMO_DIR#>/smile.gif' class='bbc_emoticon' alt=':)' />
    Flag
  • tekgirl
    tekgirl
    Have installed 1Password on my galaxy tab, but...I can only get my .pif from dropbox and when I login to dropbox on the tablet, even though I have imported the file into dropbox, all I get is the file cannot be found. Are there any further instructions?



    Thanks
    Flag
  • GeneY
    GeneY AWS Team
    Hello[url="user/60858-tekgirl/"] tekgirl,[/url]



    First of all, please make sure that 1Password application is installed on your computer and you actually have a file named .ws.agile.1Password.settings in the root (topmost) directory of your Dropbox,open the file and make sure that it points to the correct location of your 1Password data file (1Password.agilekeychain) inside of your Dropbox. (notice that the .ws.agile.1Password.settings file may be hidden from view, so enable "Show hidden files option" on your PC/Mac) Notice that this file is created automatically by 1Password for Mac/PC application when you select an option to place your 1Password keychain into Dropbox. The only purpose of ws.agile.1Password.settings file is to let 1Password for Android know where exactly your 1Password data file is located.



    Next, please install Dropbox for Android application (available for free on Market) on your phone and try to access 1Password.agilekeychain folder located inside of your Dropbox by using it. Try to download/read some files, make sure this process works OK.



    If .ws.agile.1Password.settings is found in the root directory of your Dropbox and a path specified in it does point to the location of 1Password.agilekeychain inside of Dropbox, exit 1Password Reader, restart the application and try to resync one more time. It may be possible that Dropbox server is busy processing other requests and cannot accept your request at that time. Some customers already reported this intermittent issue which was resolved when they did another sync.



    Please let me know if you need more info , I will be glad to assist you further.



    Thank you and best regards,

    Gene

    Android Developer : -)
    Flag