[whoisjuan]

It was a minor incident, but it does remind me that centralized password managers seem to have an awful amount of concentrated risk.

Or is something like 1Password truly secure at its core, even if an attacker penetrates some layers of access?

[activescott]

Yes, 1Password's end-to-end encryption model (explained at https://support.1password.com/1password-security/) should be secure to this even if an attacker penetrates some layers of access. The model of other password managers may or not hold up though.

With that said, there is a lot of rebuttals to this that begin with "but, that assumes..." that I'm sure some of our fellow HN peeps will point out here :)