https://medium.com/@rosshosman/1password-sends-your-password-across-the-loopback-interface-in-clear-text-307cefca6389
when I saw that 1Password was listening to multiple ports on the loopback interface.
when I saw that 1Password was listening to multiple ports on the loopback interface.
lsof -n -iTCP
tcpdump -i lo0 -s 65535 -w info.pcap
I imported it into Wireshark and saw the following stream.
So it appears 1Password is sending data to the browser extensions over the loopback interface in clear text and not only passwords but credit card data as well if you use it for checkout forms. If anyone is sniffing your loopback they can get any data passing between the two.
I also looked at Dashlane and how they did this type of communication and everything was encrypted. I have not checked out Safe-in-Cloud or Enpass.