Correct me if I'm wrong, but the only time when 1Password's data is not encrypted (yes, I'm aware data such as titles and URLs are not encrypted, at least with the previous AgileBits format as opposed to the 'new' OPVault right?) is when you are using a particular item (example: login, etc.)...after you unlock your vault of course. All the rest of the data is encrypted still as I read from a comment by @brenty in this thread:
Keep in mind that anything (or anyone) you give access to your system, if malicious, could simply access data as you do. After all, you need to unlock 1Password to use a login. And while it is stored on disk encrypted, it needs to be decrypted temporarily for it to be of any use to you. For example, if you mistakenly install a malicious app, it could simply collect data as you use it — or a malicious person with access to your machine could install something for the same purpose.
But we're very conscious of this, so 1Password ~doesn't~ decrypt all of your data when you unlock the app. Instead, it only decrypts each item as you use it, so that your vault cannot be compromised simply by installing a malicious app. But it's important to only install software from trusted sources, because if you do give up your system to malicious software, anything ~not~ encrypted will be fair game. At the point when someone else 'owns' it, all bets are off. 1Password cannot protect you if you give your vault + password to someone else (or simply hand over the data in unencrypted form).
If your computer has malware on it, then it is possible for some malware to get data from 1Password once you unlock it.
Could someone please elaborate on this? How could malware get to the data/vault if most (or all of it) of it is still encrypted even if you unlock it with your Master Password as stated above by @brenty? Is @jpgoldberg referring to only the data that is temporarily decrypted and in use that malware could get to?
Hope that makes sense.
I wasn't sure where I should post this since this isn't necessarily about any particular version of 1Password.
1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided