Print Command reveals all Log-in Information

Valdemar1

Upon first launching 1password, and 1password is in its locked state, and selecting "Print All" and then saving as PDF, a blank page is produced as one would expect.



However, after opening 1password by typing in the master password and then locking immediately again, selecting "Print All" and then saving as a PDF, all my log-in information is revealed, though no passwords are attached. This is quite disconcerting, and is one of the reasons I have deselected "Use Caching to load data file faster" in preferences, as it is possible to find this file and reveal log-in information by reading it with text edit. Now, anyone with access to my computer would be able to find all the log-in information using the technique I just wrote about, given that I have opened and locked 1password at least once during my current session.



Is there something that can be done about this issue?

brenty

Hey there, Valdemar1! Thanks for bringing this up.



It has been discussed before and is part of [url="http://help.agilebits.com/1Password3/agile_keychain_design.html"]the AgileKeychain design[/url]. Going forward, our next-gen data format will have everything encrypted, but at the time this was necessary to leave some metadata unencrypted in order to facilitate realtime search and indexing of data on the hardware of the day. This, of course, is why the titles and URLs are printable even when 1Password is locked, even though your login credentials themselves are not. There have been some great [url="http://forum.agilebits.com/index.php?/topic/6803-what-information-is-not-encrypted-in-the-keychain/"]discussions[/url] on this topic, but unfortunately IPBoard search is less than stellar.



I hope this helps. Let me know if you have any other questions. <img src='http://forum.agilebits.com/public/style_emoticons/<#EMO_DIR#>/smile.png' class='bbc_emoticon' alt=':)' />