In principle you should be safe keeping it in your vault. Instead, you’d be notified that something is amiss, and given a gentle reminder to verify the website and form before you fill and transmit any information. And if you attempt to fill them, 1Password wouldn’t immediately oblige. If you were to follow the link in the same phishing email, your login details wouldn’t be autofilled. Thankfully, you do have a Login item for the one-and-only. The latter also specifically addresses why they auto-create the starter kit login item for 1password itself and why you probably shouldn't delete it: Possibly useful links: secret key security, starter kit items explained. If someone stole vaults (a la the lastpass hack) they'd need the vault master passwords + secret keys to decrypt, and the secret key being inside of the encrypted vault doesn't help them with that. My understanding is that it is stored somehow (encrypted?) locally per app and used in the login / local vault decryption, and stored (encrypted) inside the vault, but not stored by 1password aside from the first 8 chars, used for account id. Should I delete this entry? Or is this only a “local” entry or something? posted by Mid to Computers & Internet (9 answers total) 2 users marked this as a favoriteīest answer: This is intended, and the secret key is definitely supposed to be stored - you *really* do not want to lose access to it! You can't add new devices without entering the secret key in some form. Here is my question - why is the secret key being stored inside of the app like any other password? Doesn’t this mean that the secret key is being stored on 1P’s severs, even if in encrypted form? I thought the big deal was that 1P had no idea what anyone’s secret key is. Then, below that, it has an entry for “Secret Key,” and this has the 35-digit secret key that I understand is the most important difference between LastPass and 1Password - i.e., a second secret password/passcode that is not known to 1Password. The entry has my password (i.e., the phrase I used to sign into the app) stored in the usual way that the app shows stored passwords for other sites/apps. When I am in the 1Password app, and I look under logins, there is an entry for “1Password Account (Our Family).” I did not create this entry. I switched from LastPass to 1Password earlier this year and I have loved every aspect of the change, but there is one thing that I am confused about.

1password app