About the issue
Your Secret Key is unique and shouldn’t be shared with anyone. It’s stored on devices you’ve used to sign in to your account, and in your Emergency Kit. Your Secret Key works with your 1Password account password to encrypt your data and keep it safe.
In March 2020, a company that analyzes data that’s been collected from malware notified us that a small number of Secret Keys were obtained from infected computers.
The first two characters of your Secret Key are the version number (“A3”) followed by a 6‑character identifier, both of which are known to us and used to aid in troubleshooting. We used this information to notify those who are affected.
What you should do
The first thing you should do is remove all malicious files and software from your computer. After you remove the malware, regenerate your Secret Key.
Step 1: Remove the malware
You can use various tools to find and remove malware from your computer. Malwarebytes is a good option.
Step 2: Regenerate your Secret Key
After you’ve removed the malware, regenerate your Secret Key:
- Sign in to your account on 1Password.com.
- Select your name in the top right, then select Manage Account.
- Select Regenerate Secret Key.
- Enter your account password, then select Regenerate Secret Key.
- Download your new Emergency Kit, and store it safely.
1Password will ask for your new Secret Key and your account password on each device you’re signed in to.
To make sure your Secret Key remains a secret, it’s important to keep your computer free of malware.