Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to know if it is safe to store the 1Password data file on DropBox?

It can be safely assumed that there are a LOT of people already doing it without any negative security side effects, but I would still like some additional confirmation before taking the plunge.

share|improve this question
It is not safe. Anything that can be hacked will be hacked, and these days it's just not enough to "hack" into something - they also usually release confidential information to prove that they have hacked. If you want garuntees, don't do it. If you're happy with "good-enough" security, then be my guest. :) – jay_t55 Jun 10 '14 at 1:25
up vote 13 down vote accepted

The 1Password people certainly support using Dropbox.

In general, 1Password uses good encryption and Dropbox keeps your files pretty private. So if you have a good master password, you shouldn't have to worry.

However, giving anyone else any sort of access to your entire password cache is always going to be less secure than keeping it to yourself. Whether the benefits outweigh the risks depends on how valuable the information the passwords protect is.

If you have nuclear launch codes in 1Password, DON'T put them on Dropbox. Otherwise, GO AHEAD.

share|improve this answer
If you have nuclear launch codes on a networked computer, you're doing it wrong. – Daniel Beck Jun 1 '11 at 23:28

You could use TrueCrypt to add another layer of security, and for some extra peace of mind. Just make sure you have a strong master password that's easy to remember.

I've been following Dropbox's recent security challenges. If you're up for some reading, here are some articles that might help you decide.

share|improve this answer

Cloudfogger is a file based encryption tool that uses AES and integrates great with Dropbox, Sugarsync and all the other cloud storage providers.

share|improve this answer

You might want to check out this blog post: 1Password and Dropbox (security tweaks wanted)

Basically the author points out that there is a text file with entry names and web sites that is not encrypted. Depending on what you're securing, this may be information that you don't wish to place onto Dropbox.

As an extreme example, if you used 1Password to store your login credentials to a terrorist web site, this file would contain the web site name. If the NSA was browsing through the contents of your Dropbox, this would raise some red flags.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .