1Password

1Password, in addition to passwords, is capable of storing myriad site credentials including one-time codes, emails / user names, and additional notes.[[1]]( "You can export your 1Pasword information at any time. If you discontinue payment, your account will enter a frozen (read-only) state that still allows you to retrieve and export your information. Your export will be limited to the information you saved in 1Password. We can’t guarantee that vault permissions, group structures, and other details about relationships between people and information are included."[[2]]( Users can import existing passwords from other managers and export passwords and other content in formats suitable for importing into other managers. 1Password is not a walled-garden. Allowing the subscription to expire places an account in a read-only state, where the user can still download their passwords and other saved content. " You have the right to your information. We'll never lock you out of your 1Password account, but we're unable to decrypt it for you."[[2]]( " You have the right to know what we know. You have the right to know what we know about you and see how we handle that information. If you make such a request, you'll receive a screenshot of what we can see about you in our systems. To protect customer privacy, these requests will be carefully authenticated beyond demonstrating control of the registered email address."[[2]]( Possibly, such a request will need to contain identifying information you have to provide in order to use the service such as email, name, address, and payment information. Users should be aware that using password manager browser extensions increases their vulnerability to clickjacking[[3]]( where the autofill feature of password managers is abused to trick the password manager into leaking user credentials and other sensitive details.[[4]]( It is considered best practice to copy in these elements on trusted pages manually. [[3]]( [[4]]( [[5]]( On September 28, 2023, the Okta Help Center suffered a security incident. During the breach, the attackers were able to extract sensitive data from the customer support system.[[17]]( 1Password, which uses an Okta instance, published a blog post disclosing an internal investigation of the breach.[[18]]( According to their disclosure, the attackers' actions triggered an email to a member of the IT team who acted swiftly to contain the breach. The company reported that no user data was exfiltrated or decrypted.[[19]]( 1Password’s so-called “lifetime license” (i.e., standalone license) was a perpetual license for a specific major version, not unlimited future upgrades: 1Password 7 for Windows launched with standalone licensing on May 29, 2018[[20]]( , however, after the release of 1Password 8, previous licenses would not be offered and previous versions would no longer be supported [[21]]( , making 1Password effectively membership-only and pushing users toward a 1Password account. While existing 1Password 7 licenses did not expire, their end-of-life meant that users would likely bump on vulnerabilities (see comment by 1P SimonH[[22]]( ).