Ask HN: Is 1password safe?
I mean, it says all data is encrypted and they never process the master password[0], but how can we be so sure there isn't a backdoor? It's proprietary software after all. Should we just trust them? Has there ever been an neutral third party audit?
[0] https://support.1password.com/master-password/#recover-your-master-password
Tavis Ormandy has a vuln under embargo: https://twitter.com/taviso/status/769391927892598784
It is unclear, however, that there's anything obviously better.