The secret key is never sent to 1Password and is only used locally.

This is why it’s so much more secure than LastPass, and Bitwarden, and any other cloud hosted solution. I know, I just pissed off all the Bitwarden fans, but it is true.

You must save your Secret Key, but it’s also saved in Apple’s Keychain so there’s a copy there as well.

Finally, if you do lose your secret key, your account can be recovered using the Account Recovery process as long as there is someone else on your account with the appropriate permissions. If you want to know how that works, ask, but it’s sort of lengthy so I’ll skip it for now.

You could save it in a local keepassXC database if you like.

This 128bit key is only saved locally, not on their servers. So contrary to you disbelief, 1Password does actually prioritise security in this manner over focusing on ‘regular customers’.

Its also fairly common to have more than one device, so you would have the key on more than one device as a result too.

An attacker would have no success with a dictionary attack (used in the article). Even if the password was in the dictionary, the private key is still missing.