What information is not encrypted in the keychain?

gpc

The [url="http://help.agilebits.com/1Password3/agile_keychain_design.html"]page[/url] on the keychain design makes clear that the name/title and the location/url of an entry are not encrypted. Judging from the example entry, items such as typeName, createdAt, passwordStrength etc are also not encrypted.



Is there a full specification somewhere about which entries are encrypted?



In particular, are the notes associated with logins and accounts encrypted?

roustem

Yes, the notes are certainly encrypted.



The document you linked is the best source. The only thing not shown in the example is the tag names. They are stored in openContents as well.

gpc

So the tag names and the items appearing in the example are not encrypted, but _everything_ else _is_ encrypted?



It's impossible to be sure what is encrypted from the example on its own because the encrypted items do not appear there. Right? They are all buried in the third entry ("encrypted" : "..."). There's no way to tell if something such as the note is encrypted or if it just missing from the example (like the tag names).

khad

The shortest version of an answer to your question is that anything used to [i]sort[/i] your data in the interface is not encrypted. The list can be seen in the [b]View > Columns[/b] menu:[list]

[*]Icon

[*]Title

[*]Location

[*]Type

[*]Modified Date

[*]Created Date

[*]Folder

[*]Password Strength

[*]Tag

[/list]

Everything else is encrypted. [url="http://blog.agilebits.com/2011/04/looking-ahead-in-security/"]We are working on a new data format which does encrypt everything[/url] (even the [url="http://help.agilebits.com/1Password3/agile_keychain_design.html#individual_entry_contents"]data which the OS X keychain does not encrypt[/url]).



I hope that helps. Please let me know if you have any additional questions.



Cheers,