Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

How is the Master Password protected with Touch ID? Seems like it goes in the Apple Keychain, which then Apple wants to sync to iCloud.

Can Apple then get my Master Password (along with FBI w/warrant, etc)?



Apple doesn't sync secure enclave information to iCloud. Also, not all iCloud synced information can be accessed. iCloud Keychain, for example, can not be decrypted by Apple.


In 1Password 7 for Mac we generate a key pair in the secure enclave. Then use that key pair to encrypt the Master Password and then save it to the Apple Keychain. All decryption of the Master Password goes through the Secure Enclave.

The key pair is generated in, and never leaves, the Secure Enclave. It's how this feature was designed by Apple.

Kyle

AgileBits




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: