Add to Chrome
← Back to blog

One Password to Rule Them All

TicketHop v1.4 eliminates the second master password for encrypted sync. Your account password now does double duty — zero extra friction, same bulletproof encryption.

Picture this: it’s Monday morning. You open your laptop, click the TicketHop icon, and get hit with a prompt — “Enter your master password.” You try the one you remember. Wrong. You try the other one. Also wrong. You dig through your password manager, copy-paste, and finally you’re in.

Now multiply that by every browser restart, every device switch, every time Chrome decides to update itself at 2 AM.

We heard you. That friction had to go.

The problem with two passwords

When we first built encrypted sync, we followed the textbook playbook: one password to log in, a separate “master password” to unlock your encryption key. It’s a pattern you’ll find in plenty of security-first apps, and there’s nothing technically wrong with it.

But in practice? It was a speed bump. Users forgot which password was which. Some people set both to the same value (defeating the purpose). Others just avoided enabling sync altogether because it felt like too much ceremony for a browser extension that’s supposed to save you time, not cost it.

We wanted the security without the hassle.

How v1.4 works

When you create an account now, TicketHop generates a random 256-bit encryption key behind the scenes. That key gets wrapped — encrypted — using your account password and stored on our server as a small, opaque blob. The server never sees the raw key. It only holds the locked box.

When you log in, we fetch the blob, unwrap it with your password, and you’re syncing. One password. One step. Done.

And here’s the part that makes the security purist in us smile: if you change your password, we don’t have to re-encrypt a single work item or note. We just re-wrap the same encryption key with your new password. Your cloud data doesn’t move. It takes milliseconds.

Passkeys get even better

If you log in with a passkey, TicketHop can link your passkey to your encryption key automatically. The first time you use a passkey and then enter your account password to unlock sync, we create a passkey-wrapped blob alongside the password-wrapped one. From that point on, your passkey unlocks everything — login and sync — in one tap. No password at all.

Forget your password entirely? That’s fine. Reset it via email, and a new encryption key is generated from your local data. Your notes and lists are safe — they live in your browser until they’re re-synced under the new key.

Pause sync when you need to

v1.4 also adds a small but mighty feature: a pause toggle on the sync status bar. Click it, and the bar turns amber. Sync stops on that device. No data goes up, no data comes down.

Why would you want this? Maybe you’re on spotty Wi-Fi and don’t want sync retries eating your bandwidth. Maybe you’re about to do a bulk reorganization of your lists and don’t want half-finished changes landing on your other machines. Maybe you just want a moment of digital quiet.

When you’re ready, flip it back and everything catches up.

A smoother start for returning users

If you already had a TicketHop account and were using the old master password, the upgrade is a one-time affair. Open the extension, enter your old master password when prompted, and v1.4 wraps your existing key with your account password. That’s it. No data re-encryption, no re-sync, no downtime.

New users and returning users both land in the same streamlined flow: log in, unlock, go.

The little things

We also tidied up a handful of UI papercuts:

  • The Settings save button no longer pretends it has unsaved changes after you’ve already saved
  • Full-page views scroll properly now (yes, really)
  • Card shadows no longer get clipped on Settings and Account pages
  • The “Sync Now” button gives you satisfying visual feedback instead of a silent shrug

Try it out

v1.4 is live now. If you’re already using TicketHop with encrypted sync, you’ll be prompted to migrate the next time you open the extension. If you’ve been on the fence about enabling sync, there’s never been a better time — one password, zero friction, same end-to-end encryption.

Questions or feedback? Drop us a line — we’re always listening.