I agree, and that comment about your security info. They can call your bank and give them all needed info for your vault like birthdate, addresses, spouse contact and do some serious social engineering , but takes me back to point one, if your vault is secured with a password what are the chances a hacker can break it?! is it possible the 1password has a flaw in the app or their security that makes it easier to access or something?! I don't know
Think about it this way. If your vault is on AgileBits' servers, should anything happen to those servers (read: major breach), to mitigate any attempts to exploit the compromise of those vaults, AgileBits would have to shut off their service altogether, leaving you locked out of your vault. That doesn't eliminate the compromise of that vault, as the hacker would still have had the means to get a copy of that vault off of AgileBits' servers for their later perusal. Similar to HIPAA when your PHI data is compromised, or worse: similar to the TMobile breach, AgileBits would have to disclose that your data has been compromised, set up fraud monitoring, etc. etc. That still doesn't eliminate the fact that your vault may have been compromised, and that while they could easily get a backup of your data restored, you'd have to go into that vault, change the password and credentials to that vault, and quite possibly every password for every entry in that vault.
That's a HUGE problem, which all of that stems from the breach at their servers being the attack vector.
Now, with a local vault, not only would they have to have physical access to where your vault is located, but they would also have to have physical access to a running copy of 1Password to attempt to open that vault. To get physical access to that vault, they would have to have physical access to your Mac or your PC (the physical computer or disk to where that vault exists). If in your house, they'd have to break into your house, which is another layer of security. Say you're smart enough to keep your vault on a disk in a safety deposit box in a bank. Well, that's 4 layers of security there. You'd have the separate disk containing the vault, the laptop, and the layer of security controls needed to access the box holding the disk at the bank, and the controls accessing the physical vault at that bank.
Wash/rinse/repeat for if it's at a storage unit, or any other location. That's a LOT of security that could be added to a single local vault that people tend to overlook for convenience at the price of $3/month without any means of getting their data back should they cancel the service. But hey, we're the ones that are archaic because we have a standalone app that has worked for years.
My other question is , will 1Password with subscription allow you to export your data? I imagine yes.
You have the ability to export your data, yes, so you'd have to do that prior to canceling the subscription, but that doesn't alleviate the issues above regarding your data not actually being data that belongs to you under the law.
Currently I am happy using the IP7 but afraid I buy an EnPass license and then they too turn subscription. Everyone is turning subscription even that MSecure one.
That's the problem we all are having, which is why we're in this thread, discussing alternatives and what to do.
BL.
