As stated in this article
I recently took a heap snapshot of my browser after clicking trough the browser version of 1password.
To my surprise the passwords of every opened item were clearly readable in that snapshot.
I did not investigate a lot further in how it actually stores this data but I assume they use a separate object for every item and retrieve the cleartext password on the first time it's opened and leave it at that.
I'd like to know if there is a way to prevent this kind of behaviour (in my own apps) by handling data in a different way.
What if I were to only store/show the cleartext data in one and the same object that is overwritten with the new data when opening another item?