Anyone with access to these files can read them. Please remember exported data is NOT encrypted. In order for Minimalist to read your 1Password data, you'll first need to export it to an unencrypted local file. This even works in free mode so you can try it out before purchasing! Here's what you'll need to do. Thankfully 1Password makes that super easy: just generate a new random string and copy (or autofill) that into the appropriate change-password form.Minimalist can import your passwords and other data from an ever growing list of password managers, including 1Password. It should go without saying, of course, that if you ever do need to log in on a public computer, you should immediately change your password as soon as you are able to do so. In this scenario, since these backup codes can each only be used one time, it makes it essentially impossible for any network monitoring to even attempt guessing your 2FA secret (.which I suppose already is borderline impossible with current tech for most OTP because of the one-way hashing involved, but too much security is almost never a bad thing.) While it's true that the attack vector of them being visible in your 1Password is almost a non-issue, as /u/1PasswordCS-Michael said, I think it's still wise to store each of those backup codes as a custom individual password field because (1) they are not visible over your shoulder if you're needing to use your 2FA on a public computer and (2) you can easily mark them as used by deleting them (and they will stay in the Password History) and (3) Watchtower will scan through these backup codes in addition to your passwords in case any have been leaked through HaveIBeenPwned and such.Ĭertainly the necessity for (1) and (2) should be minimal or zero, but having that option if nothing else can sometimes be a life-saver - for example, if you're at school and your personal laptop's battery dies unexpectedly and you just need to print something from your email or student portal, you can log in and use one of the backup 2FA codes instead of the true value it gives.

1password save new login