Is 1password's "Secret Key" in any way homologous to simply using a key file or virtual/hardware key? If you use a keyfile for a Keepass database, is that basically the same thing besides the fact you have to do the file management yourself?
back
1 comments
The secret key is is 35 random characters that are assigned to your account when you set it up and must be appended to your password to decrypt.
Whenever you log in, you need to enter your password and the key. The browser extension will cache it in a cookie, but every new device requires you to enter the key.
You remember your password, and hide the key.
It's more analogous ("homologous"? really? lol) to being automatically enrolled into a 401k: you are automatically assigned half of a very secure password.
Hardware keys typically are OTP token generators used to assist in login authentication and have nothing to do with the vault. Not at all what the secret key is.