I'm not a user of OneLogin, but if they store encrypted passwords and encryption keys, their security model is fundamentally broken imho and I'd never give them my passwords.
Better services (1password for example) are specifically designed to never know your master password/key to avoid this very situation.
Better services (1password for example) are specifically designed to never know your master password/key to avoid this very situation.