Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
My like is already on your post, but a review was warranted. Yes I will check this out. :)
You have this on both Mac and iOS, compatible with a Dropbox located vault, and has browser extensions?
Yes. Using it on Mac, iphone, ipad. I sync with icloud But it does dropbox etc:

iCloud Support
Local Only Databases
Google Drive
Dropbox
OneDrive
SFTP (Native Support)
WebDAV (Native Support)
Nextcloud / Owncloud (Best via WebDAV)

There is a good feature table on their website thats quick to read (compared to the Text version) here : Comparison table and good screenshots here : Screenshots

Btw...I have zero relationship with any pw manager company. I am just a customer.
 
  • Like
Reactions: Huntn
What the best way to convince my friends and family members to use a password manager ?
 
@max2 Cannot help you there.

I have had zero success getting people to use a password manager. Despite all the reasons why these days it is sensible, even necessary....if you want your accounts to be secure.
Mind you I dont have much success getting people to backup either, let alone to have an off site backup, or to stop leaving all their photos on their phone...

Its all good...right up till when its not.

"Never had a problem so why worry"

Yup, sure.
 
What the best way to convince my friends and family members to use a password manager ?
For years I kept a password file, just a text file that I would copy and paste my long passwords from. The rub was portable devices, which incentivized me to go to a password manager. I still keep an encrypted pdf on my iPad for emergency password access while traveling. I suppose you could just use your browsers password remember function or keychain, but in the back of my mind I thought if one of my devices was stolen or lost and someone managed to get into it, via keychain they would automatically have access to all of my passwords. So I’ve avoided that and have been using 1PW for many years and I am sold on not keeping my passwords on a large target server. That’s what attracted me to 1PW in the first place, and other than providing the software, they had no involvement with infrastructure to maintain the secrecy of your passwords.

And this is why Agelbit’s (1PW) actions are fundamentally immoral. If they want to do away with private vault support with a future version of their product that’s one thing, but to willfully break a current version of their product that uses private vaults to force their customers to choose their subscription service is BS and despicable. It’s as if they destroyed private vault support so the can argue see we need the subscriptions to support these new servers we built just for you. 👹 ****’m.
 
Zetetic Codebook ... best kept secret on the 'net. Safe, secure, offline -- great app! I've been using it since the first beta version of STRIP on Palm OS. (Secure Tool for Remembering Important Passwords!). It's certainly evolved a ton since, but the security is as top notch as ever. Very detailed documentation of how its actual encryption engine (SQLCipher) works is available and widely reviewed.

 
I've been using Enpass for a couple years, and it works... but the interface just doesn't feel finished and I've given up waiting for them to fix things. It is actively developed but they have their priorities all wrong when deciding what to work on.

Among other issues, my biggest gripe is common tasks require unnecessary keystrokes or mouse clicks. Secondarily the only unlock options are password or pin code (my password is long and painful to type, as it should be, but a pin code isn't secure enough).

Finally they've raised their prices by an order of magnitude since I purchased. Also the free plan, which used to be enough for light use, is now basically a demo.

I don't think it's better than 1Password anymore.
 
Zetetic Codebook ... best kept secret on the 'net. Safe, secure, offline -- great app! I've been using it since the first beta version of STRIP on Palm OS. (Secure Tool for Remembering Important Passwords!). It's certainly evolved a ton since, but the security is as top notch as ever. Very detailed documentation of how its actual encryption engine (SQLCipher) works is available and widely reviewed.

Thanks for posting. This looks very good. Reading through the very thorough help guide, I see that it seems to have all the necessary features. It will be a bit of work to set up templates for adding different types of data, but on the other hand, that flexibility means it can be set up exactly as one likes it.

Thanks for the recommendation!
 
Thanks for posting. This looks very good. Reading through the very thorough help guide, I see that it seems to have all the necessary features. It will be a bit of work to set up templates for adding different types of data, but on the other hand, that flexibility means it can be set up exactly as one likes it.

Thanks for the recommendation!

I'm glad it looks useful! The price is very reasonable, it's a great tool, and you won't find better support *anywhere*. I've known the folks behind Zetetic for a very long time, and the security of the tool is paramount. It's a very solid choice.
 
  • Like
Reactions: Huntn
Zetetic Codebook ... best kept secret on the 'net. Safe, secure, offline -- great app! I've been using it since the first beta version of STRIP on Palm OS. (Secure Tool for Remembering Important Passwords!). It's certainly evolved a ton since, but the security is as top notch as ever. Very detailed documentation of how its actual encryption engine (SQLCipher) works is available and widely reviewed.


This looks really good, and actually meets all the requirements I have, except one, but that isn't a fault of Codebook.

Minimum iOS requirement is 12.4, which I am not going to be upgrading my iPad mini 4 past 10.3.3, because I still have some 32bit games I play on it that will break on anything past iOS 11 or newer. So that will set me back the cost of a new iPad mini (I'm debating on the 6 or waiting), but that was something I was already going to do anyway after getting the M1 Pro MBP.

However, one of the features has me thinking as well... I could store the vault on my Mac like i do with 1Password; fine, no problem. I could then let my Synology NAS' Cloudstation client pick up that vault and automatically copy it to my PC, so that way it is stored on the NAS, Mac, and PC without needing to sync across all 3, then WiFi sync from my Mac to my iDevices.

TL; DR, multiple layers of redundancy, especially with using TM to backup my Mac and HyperBackup backup my NAS.

This might sell me.

I see that the minimum MacOS requirement is Yosemite (10.10), so that tells me that they have Intel binaries, but I see nothing on if they have a native Silicon binary. Any ideas on if they have that?

BL.
 
  • Like
Reactions: Huntn and max2
This looks really good, and actually meets all the requirements I have, except one, but that isn't a fault of Codebook.

Minimum iOS requirement is 12.4, which I am not going to be upgrading my iPad mini 4 past 10.3.3, because I still have some 32bit games I play on it that will break on anything past iOS 11 or newer. So that will set me back the cost of a new iPad mini (I'm debating on the 6 or waiting), but that was something I was already going to do anyway after getting the M1 Pro MBP.

However, one of the features has me thinking as well... I could store the vault on my Mac like i do with 1Password; fine, no problem. I could then let my Synology NAS' Cloudstation client pick up that vault and automatically copy it to my PC, so that way it is stored on the NAS, Mac, and PC without needing to sync across all 3, then WiFi sync from my Mac to my iDevices.

TL; DR, multiple layers of redundancy, especially with using TM to backup my Mac and HyperBackup backup my NAS.

This might sell me.

I see that the minimum MacOS requirement is Yosemite (10.10), so that tells me that they have Intel binaries, but I see nothing on if they have a native Silicon binary. Any ideas on if they have that?

BL.

I just checked the binary, and it's Universal. Native Apple Silicon and Intel. All good there!

Using the Syno to sync would work fine - just be sure you have backups in case one device syncs a bogus copy. Sounds like you have a belt-and-suspenders style backup (similar to what I do ...)

- Data + TM backups on Syno
- Snapshot those hourly
- Backup those via HyperBackup to a separate disk group in the Syno
- Replicate the backups to another Syno NAS somewhere else.

Best of luck -- keep us posted. You seriously won't find a better program (light & tight - well written code!) or better support than these guys.

Oh, PS -- syncing with your Syno is even easier than you imagined. Syncing via a local folder is just a preference setting!
 

Attachments

  • Screen Shot 2021-10-20 at 5.40.01 PM.png
    Screen Shot 2021-10-20 at 5.40.01 PM.png
    273.8 KB · Views: 79
  • Like
Reactions: Huntn and max2
If your data is encrypted the gov. can't do anything with it. Its hard to crack. If your password manager has the key to break the encryption, like Apple has for iCloud, yes you are done. This is a great reason to trust Bitwarden since its OpenSource so you know who holds the keys unlike closed source like LastPass and 1PW.



I created a simple survey if anyone interested to put in his vote: http://www.polljunkie.com/poll/qiyxtj/password-manager-migration

to view results: http://www.polljunkie.com/poll/mysgxa/password-manager-migration/view

poll results surprising ans pleasing for me,
EnPass most popular option to transfer to, on,y 15% will remain with 1pw. sample size is a joke though

I've been using Enpass for a couple years, and it works... but the interface just doesn't feel finished and I've given up waiting for them to fix things. It is actively developed but they have their priorities all wrong when deciding what to work on.

Among other issues, my biggest gripe is common tasks require unnecessary keystrokes or mouse clicks. Secondarily the only unlock options are password or pin code (my password is long and painful to type, as it should be, but a pin code isn't secure enough).

Finally they've raised their prices by an order of magnitude since I purchased. Also the free plan, which used to be enough for light use, is now basically a demo.

I don't think it's better than 1Password anymore.


its better because:
1 license
2 local vault
3 wifi sync
4 no electron … so far
 
poll results surprising ans pleasing for me,
EnPass most popular option to transfer to, on,y 15% will remain with 1pw. sample size is a joke though




its better because:
1 license
2 local vault
3 wifi sync
4 no electron … so far

Interestingly enough, as Codebook was just recently posted, it would be a good idea to compare Enpass to Codebook as well, as it has all of the points you listed as well.

BL.
 
his looks really good, and actually meets all the requirements I have, except one, but that isn't a fault of Codebook.

Yes, it really does! And thanks for mentioning this app here, I am really surprised I have never heard of I, especially as they seem to be around for some years. But this is also the (only) downside for me, I am not sure if I can trust all my password to an app nearly nobody has heard of before...


I will definitely test Codebook.
 
  • Like
Reactions: max2 and MacBH928
For a while there I thought that as long as I had 1Password v7 that independent vault functionality would continue no matter what crappy decisions Agilbits make into the future with v8. Well it seems that I am wrong. I also find it heinous, that a company would break a current version number of their product (v7) as a method to try to force their customers into becoming their bitches (sign up for a subscription). ?

On my Mac (1PWv7.9) 1One Password is still functional, but there is no longer a Sync Button and the last item I entered an item, it failed to be picked up by iOS devices. It looks like this was the message about private vaults no longer being supported is where I saw it, although it still shows DropBox as my primary vault. Unless it's automated (I think not), it's tough to synch without a synch button.

On my iPhone (1PWv7.9): There is still a sync button there and it appears that if I enter an item there on an iOS device, that my iPad (1PWv7.9) picked it up. So synch on iOS is currently working. I would be cautious about uploading any more updates beyond 7.9 for your iOS devices, like v7.91FU. ;)

Is there a way to revert to 1PW v7.8 or earlier for the MacOS to restore vault function? Ultimately this just gives me more incentive to find a better password manager, however...

A couple of weeks ago, I kind of got on this and tried out some other brands of password managers. I've tried:
  • Bitwarden (tried in 2020) they don't support private vaults, correct?
  • Datavault- not happy with the way it interacted with websites.
  • Enpass- I had this in 2019, the first time I broke with 1PW, and after a MacOS update, it had issues synching with my vault so I ended up going back to 1PW when I discovered they were still offering their product without a subscription (at the time), you just had to look for it hidden away in a corner. Enpass note, I read that they screwed over lifetime license purchasers by rebranding their product? Unverified. Now you can buy a lifetime license for $80. I'm hesitant.
  • KeepasswordXC- downloaded this but never completed setup. I'll look at this again.
  • MSecure- no Mac extension in v5, and v6 going to subscription model.
  • LogMeOnce- primary interaction is through browser which I did not care for. It does have a free version.
I've not followed along with this thread in the last week or two, has anyone found anything they love with
  • no subscription
  • independent vault
  • macOS and iOS extensions?

Only one i found out are : EnPasse, Codebook, and Bitwarden although you have to host a local server for that one. StickPassword but very obscure.

Zetetic Codebook ... best kept secret on the 'net. Safe, secure, offline -- great app! I've been using it since the first beta version of STRIP on Palm OS. (Secure Tool for Remembering Important Passwords!). It's certainly evolved a ton since, but the security is as top notch as ever. Very detailed documentation of how its actual encryption engine (SQLCipher) works is available and widely reviewed.


this is a weird recommendation , very obscure, no one ever mentioned this any where. I wonder about the people behind it, is it 1-2 man team or what?

you seem to be impressed with the software code, why is that?
 
Last edited:
  • Like
Reactions: Huntn
Codebook mini review:

TL;DR: A viable option

I gave it a quick test and it keeps its promise. It does everything it promises and can be a 1password alternative. One option i liked was that it seems it has a way you can adjust the AutoFill option by category so you can choose what to be filled or not in a form or application. It can also do password filling on the next page.

its not as intuitive as 1pw or EnPass. I tried the Mojave version which has a worse autofill options I think the BigSur and newer works better. I didn't know how to re-arrange the fields.For some odd reason all entries had the following arrangement:
1-password
2-url
3-username

also on Mojave it could not come up with the current username+password needed for the site you had to type in which by invoking the helper application (cmd+shift+\) but I think on big sur and newer it works.

All in all, it has a small learning curve and looks like it works better with big sur and newer. A viable alternative to 1password. I will still go with EnPass because its better known, more intuitive, and more similar to 1password. Do not look over CodeBook if you don't like EnPass for any reason, I have added it to the original post as an alternative to 1password.

My only worry is the people behind it, is it 1 man team or what?

thanks for @hansmoleman for suggesting this one
 
  • Like
Reactions: Huntn
Codebook mini review:

TL;DR: A viable option

I gave it a quick test and it keeps its promise. It does everything it promises and can be a 1password alternative. One option i liked was that it seems it has a way you can adjust the AutoFill option by category so you can choose what to be filled or not in a form or application. It can also do password filling on the next page.

its not as intuitive as 1pw or EnPass. I tried the Mojave version which has a worse autofill options I think the BigSur and newer works better. I didn't know how to re-arrange the fields.For some odd reason all entries had the following arrangement:
1-password
2-url
3-username

also on Mojave it could not come up with the current username+password needed for the site you had to type in which by invoking the helper application (cmd+shift+\) but I think on big sur and newer it works.

All in all, it has a small learning curve and looks like it works better with big sur and newer. A viable alternative to 1password. I will still go with EnPass because its better known, more intuitive, and more similar to 1password. Do not look over CodeBook if you don't like EnPass for any reason, I have added it to the original post as an alternative to 1password.

My only worry is the people behind it, is it 1 man team or what?

thanks for @hansmoleman for suggesting this one

Definitely not a one-man team.


They've been around for 16 years, and actually created SQLCipher, which is what Codebook uses, along with NASA, Oracle, Volvo, and quite a few others, as they deal with a lot of Fortune 500 companies as well. SQLCipher is OSS, so it definitely is reviewed.


I wouldn't let the notoriety of others influence anyone's judgment; after all, 1Password is probably the best recommended password manager out there, then look at what happened. LastPass was as well, until their breach problems. Hell, Linux was unknown, to the point of being a joke in the early to mid-1990s (the Campus Computing department at the university I worked at and attended as a student told us that if any student was found using Linux on their hardware they would be banned from all university networks; they preferred Novell)...

.. Look at where Novell and Linux are today.

With the clients Zetetic has, they won't be going anywhere anytime soon.

BL.
 
I'm glad it looks useful! The price is very reasonable, it's a great tool, and you won't find better support *anywhere*. I've known the folks behind Zetetic for a very long time, and the security of the tool is paramount. It's a very solid choice.
It looked good until I realized that there isn’t a family option. I guess the only way to handle that is just share one database with everyone. But I am not wild about that. Still, this project does look good and I like that it is cross platform.
 
Zetetic Codebook ... best kept secret on the 'net. Safe, secure, offline -- great app! I've been using it since the first beta version of STRIP on Palm OS. (Secure Tool for Remembering Important Passwords!). It's certainly evolved a ton since, but the security is as top notch as ever. Very detailed documentation of how its actual encryption engine (SQLCipher) works is available and widely reviewed.

Does it have browser extensions? Just curious. One thing I liked about 1PW was that it would fill and not insist on loading a new page, the url it had in it’s record.
 
  • Like
Reactions: max2
I guess the only way to handle that is just share one database with everyone. But I am not wild about that.
I'm curious as to why, though? I would believe (since I don't use it) that, for example, a family plan at 1P includes a vault/database that is shared. Therefore you have your own, and a shared one. Isn't this the same thing you are talking about with Codebook?

Or are you talking about the seamlessness of use?
 
Definitely not a one-man team.


They've been around for 16 years, and actually created SQLCipher, which is what Codebook uses, along with NASA, Oracle, Volvo, and quite a few others, as they deal with a lot of Fortune 500 companies as well. SQLCipher is OSS, so it definitely is reviewed.


I wouldn't let the notoriety of others influence anyone's judgment; after all, 1Password is probably the best recommended password manager out there, then look at what happened. LastPass was as well, until their breach problems. Hell, Linux was unknown, to the point of being a joke in the early to mid-1990s (the Campus Computing department at the university I worked at and attended as a student told us that if any student was found using Linux on their hardware they would be banned from all university networks; they preferred Novell)...

.. Look at where Novell and Linux are today.

With the clients Zetetic has, they won't be going anywhere anytime soon.

BL.

idk what Zetetic or SQLcipher is but linux was near unusable until 1993 with slackware release I think. My understanding it had horrible hardware support even after the 90s so its not the same in comparison.

albeit I can see they getting a substantial market share if they advertise themselves as their price is very reasonable I think $20 and it does everything 1pw does for subscription for the most part.

It looked good until I realized that there isn’t a family option. I guess the only way to handle that is just share one database with everyone. But I am not wild about that. Still, this project does look good and I like that it is cross platform.

if you mean by family option a shared database, then wouldn't that make 1pw the best choice for you? your passwords will be stored in the cloud already.

Does it have browser extensions? Just curious. One thing I liked about 1PW was that it would fill and not insist on loading a new page, the url it had in it’s record.

Download it and see for yourself how it works. importing the data is as easy as : export from 1password in CSV and import in Codebook in CSV.
 
  • Like
Reactions: max2 and Huntn
Does it have browser extensions? Just curious. One thing I liked about 1PW was that it would fill and not insist on loading a new page, the url it had in it’s record.

There appears to be one for Safari, but I don't see one for Chrome or any others. I'm looking around for those as well. It isn't a dealbreaker for me, however.

BL.
 
  • Like
Reactions: max2 and Huntn
idk what Zetetic or SQLcipher is but linux was near unusable until 1993 with slackware release I think. My understanding it had horrible hardware support even after the 90s so its not the same in comparison.

Yet Linux was being used on nearly every webserver in the mid-late 90s going into the 2000s, made the other major Unix OSes obsolete, causing some of those companies to completely go out of business (Ultrix? gone. Digital Unix? gone. SCO? gone. BSDi? gone. NeXT? sorta gone. Dynix? gone. Novell? gone. Solaris, HPUX, and AIX are all but gone.)

My point here is that it was considered a joke and a laughing stock by all of the "well known" companies, while now those "well known companies" are all but buried. Not bad for an unknown one-man show that now is a huge show with tons of developers.

Zetetic apparently has been around for longer than that 15 years, as they were providing password managers for the Palm Pilot roughly 20 years ago. So they have definitely been around.

BL.
 
  • Like
Reactions: Huntn
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.