1Password clarifies the reasons behind alarming Secret Key and password change notifications
1Password clarifies recent password change notifications were caused by a brief service disruption and not a security breach, according to a statement by CTO Pedro Canahuati. On April 27th, an erroneous message was displayed by 1Password’s client applications stating that customers’ Secret Key or password had been recently changed, which caused concern among users. Canahuati explains that this was the result of the U.S. servers responding to a spike of sync requests following the migration of backend databases. The issue was resolved by 9:26 PM ET the same day, and 1Password will use the data collected during the incident to improve its database migration processes and error handling.
