Hi Kevin,

I'll be honest and say that I've never really looked into how my1password works. I use Password Vault on a USB thumb drive so that way I have control over my data. If you trust that they do what they say and that the data really is encrypted then it's probably fine, but it does come down to trust. It's easy to SAY you do stuff, that doesn't mean you do it! In fact, that's the whole point with Trojans, they say they're codecs or games or what ever but are really key loggers etc.. It all comes down to trust. Ideally you should adopt what Steve Gibson of Security Now fame calls TNO, or Trust No One, but in reality that's not really practical. Yet again it's a trade off between security and practicality.

Bart.