Top all-time · #274
Blog on 1Password Blog
Company blog · blog.1password.comsecurityproductivity
Blog on 1Password Blog is the company blog at blog.1password.com, writing about security and productivity. Since 2018, 180 different Hacker News readers have linked it 272 times, most often “Coming soon: Securely import and export passkeys”. It is still writing: the last post was on 2026-10-27, and you can follow it by feed.
Expert articles, security news, product updates, guides, and research from 1Password on password management, privacy, and digital security.
Most-linked posts?
- Coming soon: Securely import and export passkeys9 people · 9 mentions · first linked 2024-10-14
- We’ve joined the FIDO Alliance to build a better future for authentication7 people · 11 mentions · first linked 2022-06-03
- 1Password introduces virtual Credit Cards7 people · 7 mentions · first linked 2020-09-22
- Is it wrong to store passwords and one-time codes together?6 people · 7 mentions · first linked 2020-08-05
- 1Password Secret Key: What is it, and how does it protect you?6 people · 7 mentions · first linked 2021-12-29
- Psst Now you can securely share 1Password items with anyone6 people · 6 mentions · first linked 2021-10-12
- SSH and Git, Meet 1Password6 people · 6 mentions · first linked 2022-03-15
- 1Password to Add Telemetry5 people · 5 mentions · first linked 2023-03-13
- Okta Support System Incident and 1Password4 people · 5 mentions · first linked 2023-10-23
- 1Password 8: The Story So Far4 people · 4 mentions · first linked 2021-08-13
What Hacker News says?
1password have an interesting article about integrating with FastMail using JMAP: https://blog.1password.com/making-masked-email-with-jmap/
Comment linking /making-masked-email-with-jmap/
on “Ask HN: Gmail account security”Submitted 1Password Has Raised $620M as a story · 681 points
HN discussionhttps://blog.1password.com/1password-8-the-story-so-far/ Common rust library code with platform specific UI code. Native UI code for Android, macOS and iOS. The app is Electron based on Windows and Linux for the reasons they give in the article. Article from a year ago, so maybe outdated.
Comment linking /1password-8-the-story-so-far/
on “Bitwarden raises $100M”Submitted 1Password for Linux beta as a story · 413 points
HN discussion1Password supports this: https://blog.1password.com/1password-ssh-agent/
Comment linking /1password-ssh-agent/
on “Apple Passkey”Submitted 1Password for Linux as a story · 392 points
HN discussionSeems like this will be possible: https://blog.1password.com/1password-is-joining-the-fido-all...
Comment linking /1password-is-joining-the-fido-alliance/
on “Apple Passkey”Submitted 1Password Secrets Automation as a story · 374 points
HN discussionhttps://blog.1password.com/1password-is-joining-the-fido-all...
Comment linking /1password-is-joining-the-fido-alliance/
on “Apple Passkey”Submitted Does Australia's access and assistance law impact 1Password? as a story · 260 points
HN discussionThen use another password manager that supports passkeys? Like 1Password https://blog.1password.com/1password-is-joining-the-fido-all...
Comment linking /1password-is-joining-the-fido-alliance/
on “Apple Passkey”Submitted Support for U2F security keys as a story · 236 points
HN discussion1Password is also part of FIDO. I assume if you want to use 1Password on Apple devices to store passkeys that should work fine, just like it does for passwords today. https://blog.1password.com/1password-is-joining-the-fido-all...
Comment linking /1password-is-joining-the-fido-alliance/
on “Apple Passkey”Submitted Supporting Let’s Encrypt, the nonprofit making HTTPS free for all as a story · 159 points
HN discussionI would bet their Privacy.com integration is also v8/cloud only: https://blog.1password.com/privacy-virtual-cards/
Comment linking /privacy-virtual-cards/
on “1Password Has Raised $620M”Submitted 1Password to Add Telemetry as a story · 68 points
HN discussionThere's a couple examples already, including one click credit card information saving (through your card issuer), and their private email aliasing through fastmail partnership. A lot less incendiary than your hypotheticals. https://blog.1password.com/save-in-1password-button-with-ram... https://1password.com/fastmail/
Comment linking /save-in-1password-button-with-ramp/
on “1Password Has Raised $620M”Submitted 1Password and 2FA: Is it wrong to store passwords and one-time codes together? (2023) as a story · 62 points
HN discussionBoth the Fastmail[0] and Privacy [1] integrations have made 1Password a joy to use in the past few years. I've used premium BitWarden in the past, but the UX of 1Password is hard to beat. Congrats to the 1Password team! - [0] https://blog.1password.com/fastmail-masked-email/ - [1] https://blog.1password.com/privacy-virtual-cards/
Comment linking /privacy-virtual-cards/
on “1Password Has Raised $620M”Submitted 1Password for Visual Studio Code as a story · 36 points
HN discussionYes and no. A much better explanation than I can give here is covered in our blog post: https://blog.1password.com/totp-for-1password-users/ - Ben, 1Password
Comment linking /totp-for-1password-users/
on “1Password for Linux development preview”Submitted 1Password joins the Rails Foundation: Strengthening the community, developers as a story · 35 points
HN discussionHi there! Not quite. An attacker would need either your account password AND an already authorized device, OR they would need both your account password AND Secret Key. If you have 2FA enabled for your 1Password account, and the attacker doesn't have one of your authorized devices, they would also need your second factor (TOTP or hardware key). Additionally our Principal Security Architect, Jeff Goldberg, wrote some…
Comment linking /totp-for-1password-users/
on “Uber investigating breach of its computer systems”Submitted Save your Phantom wallet details in 1Password as a story · 32 points
HN discussionHi. I'm a features developer for 1Password. You raise a very good question (one that I used to have myself, before I started working here). I would recommend you read our security whitepaper ( https://1password.com/files/1Password-White-Paper.pdf ) if you want details, but the TL;DR is that we don't know your account password and our servers only store your encrypted information (which we cannot read), and communica…
Comment linking /what-if-1password-gets-hacked/
on “1Password 8 will be subscription only and won’t support local vaults”Submitted 1Password X 1.17: New brain written in Rust, new menu, and even more accessible as a story · 21 points
HN discussion1Password's cloud offering architecture has a few important distinctions from other offerings. Namely the use of a password authenticated key exchange (PAKE) and a "Secret Key" that is never transmitted to 1Password servers. [1, 2] If you ultimately trust the app for local vaults, there's a case for extending that trust to the cloud offering. [1]: https://blog.1password.com/what-the-secret-key-does/ [2]: https://old…
Comment linking /what-the-secret-key-does/
on “LastPass users warned their master passwords are compromised”Submitted Psst Now you can securely share 1Password items with anyone as a story · 20 points
HN discussionNo, it also adds security. If someone steals a signing key then they also need to steal the HTTPS cert. Or control the DNS records and generate a new one or switch to HTTP. Adding an extra layer of encryption is like adding more characters on a password. Sometimes it saves your bacon, sometimes it was useless and came with performance drawbacks. If you still disagree with me, that's fine. But I want to hear why you…
Comment linking /three-layers-of-encryption-keeps-you-safe-when-ssl/tls-fails/
on “Why does APT not use HTTPS?”Submitted 1Password 8 for Mac is here as a story · 19 points
HN discussion
