1Password clarifies: recent security incidents are caused by service outages, not vulnerabilities

CTOnews.com May 3 news, some 1Password users have recently received a notification that they have recently changed their password, and the developer issued a clarification statement today: the notification was sent due to a service interruption, not a security vulnerability.

1Password said that some 1Password users were incorrectly notified of a reset password after routine database maintenance on Thursday, April 27.

Pedro Canahuati, chief technology officer (CTO) of 1Password, said: "between 09:03 and 09:26 EDT on April 27, 1Password experienced a brief service outage. This is not a security incident and customer data are not affected."

The affected client application displays an incorrect message: your key or password has recently changed. Enter your new account details to continue.

The error alarm is triggered by 1Password's US server responding to a surge of synchronous requests after the back-end database migrates and refuses to log on.