Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I would like to know if it is safe to store the 1Password data file on DropBox?

It can be safely assumed that there are a LOT of people already doing it without any negative security side effects, but I would still like some additional confirmation before taking the plunge.

share|improve this question
    
It is not safe. Anything that can be hacked will be hacked, and these days it's just not enough to "hack" into something - they also usually release confidential information to prove that they have hacked. If you want garuntees, don't do it. If you're happy with "good-enough" security, then be my guest. :) –  Aeron Jun 10 at 1:25
add comment

4 Answers

up vote 11 down vote accepted

The 1Password people certainly support using Dropbox.

In general, 1Password uses good encryption and Dropbox keeps your files pretty private. So if you have a good master password, you shouldn't have to worry.

However, giving anyone else any sort of access to your entire password cache is always going to be less secure than keeping it to yourself. Whether the benefits outweigh the risks depends on how valuable the information the passwords protect is.

If you have nuclear launch codes in 1Password, DON'T put them on Dropbox. Otherwise, GO AHEAD.

share|improve this answer
14  
If you have nuclear launch codes on a networked computer, you're doing it wrong. –  Daniel Beck Jun 1 '11 at 23:28
add comment

You could use TrueCrypt to add another layer of security, and for some extra peace of mind. Just make sure you have a strong master password that's easy to remember.

I've been following Dropbox's recent security challenges. If you're up for some reading, here are some articles that might help you decide.

share|improve this answer
add comment

Cloudfogger is a file based encryption tool that uses AES and integrates great with Dropbox, Sugarsync and all the other cloud storage providers.

share|improve this answer
add comment

You might want to check out this blog post: 1Password and Dropbox (security tweaks wanted)

Basically the author points out that there is a text file with entry names and web sites that is not encrypted. Depending on what you're securing, this may be information that you don't wish to place onto Dropbox.

As an extreme example, if you used 1Password to store your login credentials to a terrorist web site, this file would contain the web site name. If the NSA was browsing through the contents of your Dropbox, this would raise some red flags.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.