Enpass does this as well, along with a few other password managers.
Again, the problem is three-fold:
- 1Password/AgileBits forced everyone to their subscription model, despite the fact of publicly stating that nothing would change with their licensing models and support.
- Because of #1, current users (meaning, those without standalone licenses or not using anything older than 1Password 7) are forced to store their vaults on their servers, leaving them with no physical autonomy of their vaults and their data. If I needed to upgrade for any reason, I would have to not only give up my standalone license (which is a permanent license), and pay again - and either a monthly or annual fee - for their subscription to store the same data that I already have with their permanent license. Furthermore, it would be my vault located on their server. If there should be some type of investigation against me, the government would not need a warrant to retrieve my vault. 1Password would be considered a 3rd party to that investigation, so only a subpoena would be needed for them to turn over my data. And worse than that: I would not be notified that that would be happening, because I would be 3rd party to that subpoena. In the US, the 4th Amendment would not apply; that is a MAJOR PROBLEM.
- The aforementioned Intel/Apple Silicon issue. Because of that, with Rosetta 2 being dropped in 2028, those on Intel Macs will be stranded for most/all OS support, as those Macs will be declared obsolete. You wouldn't be able to use a Silicon-based Mac, install 1Password 6, and expect it to work; there will be no support for any Intel binaries. If you tried to purchase 1Password 7 and obtain a standalone license, you couldn't, because they took down their license provisioning servers, leading you back to the problem with #1.
1Password screwed over a LOT of users for what they have done, and despite the fact that they said that none of this would happen; hence, this now 118-page long thread.
BL.
I did not like the way they handled the switch to subscription models for existing users either. I ended up using it for a while, for then switching to ProtonPass, still with a subscription, in bundle with all the other Proton products (vpn, mail, alias email addresses, etc…)
Regarding point 2, it is not exactly true. 1Password (or any other serious provider that stores the vault in the cloud) has an encrypted version of your vault. This is what they are able to provide to the authorities, but decrypting that is close to being impossible today, if your encryption key is something more complicated than “password12345”!
Each tool has its own strategy to encrypt the data, it can be with a random secret key stored on your devices and protected by biometric or password, can be directly a password, a combination or something else, but in general the provider is not able (or should not be able) to access your data, even if it is stored in their cloud servers.
For 1password, details can be found here:
https://support.1password.com/1password-security/
For Proton Pass, details can be found here:
https://proton.me/blog/proton-pass-security-model
This, combined with independent code audits, as both 1Password and Proton Pass, which is even open source, do, should guarantee that your data is safe.