# Password Managers: Under the Hood of Secrets Management - Independent Security Evaluators

<https://www.securityevaluators.com/casestudies/password-manager-hacking/>

- Host: [securityevaluators.com](https://links.thingelstad.xyz/hosts/securityevaluators.com/)
- Saved: February 21, 2019 (2019-02-22T03:29:50Z)
- Record: https://links.thingelstad.xyz/links/a3ae57c0aaec/
- JSON: https://links.thingelstad.xyz/links/a3ae57c0aaec.json

## What Jamie wrote

This is all about how password managers deal with unencrypted data in memory. On disk the encryption is all fine, but when running, they should minimize the attack surface. I was expected better outcomes for 1Password, my preferred password manager. Note though that these all require access to a computer and unlocked memory state, so the real risk is low. Nonetheless, I'd like to see this improved.

## Facts

- Kind: [Page](https://links.thingelstad.xyz/kinds/page/)

## Appears in

- [WT94: Weekly Thing #94 / Feb 23, 2019](https://weekly.thingelstad.com/archive/94/), Notable Links 📌

## Saved the same week

- [Privacy is a commons | TechCrunch](https://links.thingelstad.xyz/links/5b9819396349/) (techcrunch.com, February 21, 2019)
- [Launch WorldWideWeb CERN 2019 WorldWideWeb Rebuild](https://links.thingelstad.xyz/links/1ad049279564/) (worldwideweb.cern.ch, February 21, 2019)
- [The Weekly Email – AVC](https://links.thingelstad.xyz/links/2df5806a7d9e/) (avc.com, February 21, 2019)
- [Introducing .dev domains from Google Registry](https://links.thingelstad.xyz/links/1877af0a060e/) (blog.google, February 21, 2019)
- [On being an Engineering Manager | Nick McHardy](https://links.thingelstad.xyz/links/5d01868ca069/) (nickmchardy.com, February 21, 2019)

## Elsewhere

- Wayback Machine: https://web.archive.org/web/*/https://www.securityevaluators.com/casestudies/password-manager-hacking/