[mplanchard]

I also use 1Pasword. A while back there was a bit of a hullabaloo regarding the ability to extract passwords stored in 1P (and other password managers) from a memory dump[1].

I sent an email to the support team at the time asking some technical questions that the security report raised for me, and wondering how the team was planning to evolve the product going forward. They sent back a very in depth, detailed answer that included info about some of the experiments they were doing to decrease the amount of time passwords were decrypted in memory, along with looking into Rust for better direct memory management than they could get with C# or Swift. All in all, the care and quality of the response gave me a great impression of the team and of their approach to user interactions.

[1]: https://www.securityevaluators.com/casestudies/password-mana...