Live data from Hacker News

1Password Travel Mode: Protect your data when crossing borders

blog.agilebits.com

21–30 of 553 posts

Re: 1Password Travel Mode: Protect your data when crossing borders

#21

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

That's basically the definition of spoliation of evidence, if things were to ever escalate to civil or criminal proceedings.

Re: 1Password Travel Mode: Protect your data when crossing borders

#22

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

I think using it would be tampering with evidence in the USA. So probably a bad idea.

Re: 1Password Travel Mode: Protect your data when crossing borders

#23

Earlier quoted context omitted.

They can ask for logins for the vaults they see on your device. But those vaults are the ones you've marked "travel-safe", so you're accepting the risk of these being breached by invasive governmental searches. However, non-travel-safe vaults a) won't show up on your devices, so they can't ask for what they don't know the existence of, and more importantly b) there is no evidence on the device of "hidden" vaults, or…

How is the web interface handled? Essentially, where do you turn this on and off? Wouldn't it become standard ptotocol to just demand web credentials for 1Password? This feature is only for subscription based 1Password accounts, so it would seem to me it would just be easiest to delete the app and re-download after crossing?

Demanding web logins rather than local logins for anything is a step beyond the fuzzy legal authority currently given to the TSA.

Re: 1Password Travel Mode: Protect your data when crossing borders

#24

Earlier quoted context omitted.

How is the web interface handled? Essentially, where do you turn this on and off? Wouldn't it become standard ptotocol to just demand web credentials for 1Password? This feature is only for subscription based 1Password accounts, so it would seem to me it would just be easiest to delete the app and re-download after crossing?

Demanding web logins rather than local logins for anything is a step beyond the fuzzy legal authority currently given to the TSA.

They already ask for social media account logins.

Re: 1Password Travel Mode: Protect your data when crossing borders

#26
post #4

Earlier quoted context omitted.

> Or simply don't have anything to hide. If you have a guilty conscience that is going to manifest itself in your body language and mannerisms. What if I am an anxious guy? What if I carry some business secrets? What if I don't want some TSA agent look at my SO pics I have on my devices/social media?

Being anxious is something you can work on. Business secrets are perfectly legal to carry across a border. Not wanting the TSA to look at your shit is something I can understand. I'd basically tell them to fuck off (in a more diplomatic sense) until it reached the point of being either blocked entirely from traveling or detainment. At that point you gotta ask yourself if the juice is worth the squeeze and turn back o…

Just out of curiosity, how's the treatment at the border in Canada?

Re: 1Password Travel Mode: Protect your data when crossing borders

#27

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

Do you want to go to prison?

Re: 1Password Travel Mode: Protect your data when crossing borders

#28
post #5

Excellent effort. I do wonder though, what is to prevent authorities from forcing you to just turn off travel mode? Is there a timer that you set? Deadman's switch? Geolocating? (The last 2 are not good solutions, but you get the idea) Edit: I missed this bit below: > even if you’re asked to unlock 1Password by someone at the border, there’s no way for them to tell that Travel Mode is even enabled. However, it won't…

My instinct is that if you have anything stored on your device, you're at risk crossing borders. So in my case, I would likely remove both the Dropbox app and KeePass, and then reinstall them on arrival. I suppose that would leave detectable traces, which could argue for using a burner phone, and then installing those two on arrival on it.

Re: 1Password Travel Mode: Protect your data when crossing borders

#30

Wouldn't an alternative "destroy everything" password be a good idea also ? Would work like this : When forced to enter / give the password to your vault, you enter/give this one, and everything the vault contains is wiped out before the vault is unlocked.

No. That's only a good idea if the criminal sentence for destruction of evidence is less than the criminal sentence you'd receive for possessing whatever data it is you just destroyed.
Post reply on HN