Contact

One address, and no form.

Last updated

contact@onepassword.net

Why there is no contact form

A form on a static site has to send what you type somewhere — either to a backend this site does not have, or to a third-party form service. The second option would mean routing your message through a company you did not choose, on a site whose entire argument is that nothing you type goes anywhere.

So there is no form. The content security policy on every page saysform-action 'none', which means a form could not submit even if one were added by accident.

What is most useful to send

  • A number that looks wrong. Most pages here publish arithmetic — entropy figures, collision bounds, character counts. If one does not add up, that is the most valuable thing you can report.
  • A dead or changed citation. Specifications move and research pages disappear. A link that no longer supports the claim next to it is a real problem.
  • A page that misbehaves on your device. Browser and version help, and so does anything the console printed.
  • A tool that is missing. Worth mentioning, though the answer is often that the thing you need is better handled by something already installed on your machine.

Reporting a security issue

Use the same address and put security in the subject line.

Worth reporting: a weakness in how a value is generated, a way to make a tool leak what it produced, a content security policy bypass, or anything that makes a published figure substantially wrong in a way that would leave someone less protected than they think.

Good-faith research is welcome and will never be met with a legal threat. Please do not run automated scans against the site — it is static files on a CDN and there is nothing behind it to find. Testing in your own browser tells you everything a scanner would.

What this address is not for

  • Link exchanges, guest posts and paid placements. These get no reply.
  • Recovering a lost password. Nothing generated here is stored, so nothing can be looked up.
  • Advice on your specific system. The pages say what they can support; beyond that is guesswork.

What to expect

This is a small independent project rather than a company with a support desk. A reply may take several days, and a message that needs no reply may not get one. Corrections do get made, and the date at the top of the affected page changes when they are.