1Password migrants thread

[MisterSavage]

Based on this thread: https://1password.community/discussion/139214/telemetry-function
It looks its going to be an opt-in setup, not a forced collection of usage.

Hmmm. That's not how it sounds from the 1PW blog post.

• Customer accounts are not included for now. Once we’re confident it delivers on our privacy standards, we’ll announce a timeline for rolling telemetry out to customer accounts. At that point, we’ll also provide guidance on how you can opt out if you’d like to.

Either way glad they're providing an opt out.

 

[Alwis]

Based on this thread: https://1password.community/discussion/139214/telemetry-function
It looks its going to be an opt-in setup, not a forced collection of usage.

And if it was, I lost my trust in 1PW some time ago, why should I trust them with this. Beside that, bugs do happen and there is no way of checking this.

 

[maflynn]

I lost my trust in 1PW some time ago,

I don't think anyone is going to try to convince you (or anyone) to use 1PW when you don't trust the company. I get that, and you need to use what you feel comfortable.

I'm still testing or if you will re-testing 1PW, I've not yet decided if I wanted to return back to Bitwarden or stick with 1PW. Both 1PW and Bitwarden, have their own unique pros and cons - I'm just trying to see how well each of their pros integrate into my priorities as well as how impactful the cons are to my usage.

 

[johnkree]

Felix Krause (@KrauseFx@mastodon.social)

Attached: 1 image This sums up @1Password and Big Tech so well

mastodon.social

 

[Samu25]

Hello, I need some recommendations please.

I am looking for a password manager that supports AutoFill in Safari on Mac as well as iOS.
Migrating away from LastPass, which is absolute ASS on Mac ... 😬

I have tried out Dashlane and Minimalist after checking out the TLDR of this thread, but both of their Autofill solutions are broken on Mac with no ETA when/IF they will fix it. 🙄

I don't mind a subscription at all, willing to pay for ease of use and peace of mind.
Please don't suggest something where you have to host an own server or locally or whatever, I want it in the cloud, no complicated setups requiring hacker skills 😅

 

[sppunk]

Hello, I need some recommendations please.

I am looking for a password manager that supports AutoFill in Safari on Mac as well as iOS.
Migrating away from LastPass, which is absolute ASS on Mac ... 😬

I have tried out Dashlane and Minimalist after checking out the TLDR of this thread, but both of their Autofill solutions are broken on Mac with no ETA when/IF they will fix it. 🙄

I don't mind a subscription at all, willing to pay for ease of use and peace of mind.
Please don't suggest something where you have to host an own server or locally or whatever, I want it in the cloud, no complicated setups requiring hacker skills 😅

I highly recommend Strongbox.

 

[bradl]

Hello, I need some recommendations please.

I am looking for a password manager that supports AutoFill in Safari on Mac as well as iOS.
Migrating away from LastPass, which is absolute ASS on Mac ... 😬

I have tried out Dashlane and Minimalist after checking out the TLDR of this thread, but both of their Autofill solutions are broken on Mac with no ETA when/IF they will fix it. 🙄

I don't mind a subscription at all, willing to pay for ease of use and peace of mind.
Please don't suggest something where you have to host an own server or locally or whatever, I want it in the cloud, no complicated setups requiring hacker skills 😅

Funny thing here is that those solutions you are looking for are the reasons people are migrating away from them. Again, having that data in the cloud is convenient, but as you have read on the hacking incidents with Dashlane and LastPass, to paraphrase Ben Franklin, when you sacrifice security for convenience and peace of mind, you may end up losing both.

With LastPass and Dashlane both getting hacked and users' data being exposed/stolen, your peace of mind in having it in the cloud is lost because you are no longer in control of your data, and the convenience of having it in a centralized location meant that it was easier for hackers to get to multiple people's data. That is a huge risk for convenience and ease.

That said, You'll find that Enpass allows you to keep your data local to you, across multiple devices, and does support autofill. Additionally, no complicated setup is required, as you can turn on WiFi sync to sync your data across those devices. But if you want it in the cloud, and to pay for a subscription, then 1Password is what you're looking for.

BL.

 

[Eric_WVGG]

I had a pretty lousy experience with 1Password a few weeks ago.

Our company (12 employees) was squeezed into their "starter package" of 10 users for $20/mo. So far so good. But we took on a few more workers, and I couldn't deal with the limited access anymore. The next step listed on the website is $8/head per month, which would immediately bump us to over $100/mo.

I gritted my teeth to bite the bullet on this, but there's no way to just upgrade on your website — you have to call a damned sales rep. So I did, and of course the guy tells me about some secret offer that's not listed on the website, now we're at 15 or so users for $40/mo.

(oddly, it also took two days to turn on, which I don't understand because computer services are pretty much instantaneous, I know, I write computer software for a living…)

I was pretty angry when 1Password dumped their native client for Electron trash, but at least I understood the logic behind the move. I didn't think it was actually a sign of a fundamental shift in the nature of a once-great company. Depressing.

 

[gregmac19]

I have tried out Dashlane and Minimalist after checking out the TLDR of this thread, but both of their Autofill solutions are broken on Mac with no ETA when/IF they will fix it. 🙄

As most know, Apple’s AutoFill only works for Safari on macOS. And Minimalist doesn’t have a solution for other browsers. So if AutoFill is not currently working for Minimalist users, it must be pretty tough for them on the Mac right now.

Additionally, Minimalist doesn’t allow you to keep your vault local, as you have to sync via iCloud.

Finally, Minimalist is now available only via subscription ($4.99/month or $29.99/year).

There must be reasons why people use Minimalist, but those aren’t clear to me at all.

 

[BigSplash]

I have been using PasswordWallet from Selznick Scientific for many years. It uses local storage for its db but can sync multiple devices and is available for macOS, iOS, Windows and Android (unsure about Linux). Versions are available for a one-time license fee. I have no connection to the company; just a satisfied customer.

 

[maflynn]

Hello, I need some recommendations please.

Check out Bitwarden

 

[MisterSavage]

I don't mind a subscription at all, willing to pay for ease of use and peace of mind.
Please don't suggest something where you have to host an own server or locally or whatever, I want it in the cloud, no complicated setups requiring hacker skills 😅

The UI is kind of ugly and clunky, but I'm very happy with Bitwarden. 95% of what I use it for is autofill. It wouldn't cost you anything to try it.

 

[MacBH928]

Heads up: Proton is releasing their own password manager it seems

 

[MacBH928]

Installed an app called LuLu to see if an app called Raycast is calling home. Didn't find anything about Raycast but Enpass is contacting else where. Maybe not malicious but raises concern

 

[MacBH928]

Interesting you should say that, as SplashID 9 was just released this morning.

However, now it's a deal breaker for me:

SplashID Pro 9

SplashID Pro 9 brings to you seamless sharing with trusted users and groups, flexible record content, authenticator OTP code generation, productive information views and third party sign in using Google or Apple accounts. Try it and experience security.

www.splashid.com

The free plan is a single device, 25 records maximum, no syncing or sharing, and no automated backups. I'm okay with the backups as I backup my vaults to my Mac as well as to my NAS, and the backup both the Mac and NAS. But the syncing, number of records, and devices are a deal breaker, meaning that most users would have to go to the Pro version, which is a yearly cost.

Ugh; subscription models really do suck.

BL.

I looked on their website everything was outdated.

Either way it has nothing to offer. Subscription and no features mentioned. At that point just go with 1password and stick with the crowd is better. Or Bitwarden for free.

Yes they do.
And while folk keep paying subs it will never change.
Funny how subs and bad corporate ethics seem to frequently coincide.

Not for long once they realise people monthly bills are adding and start canceling

Hello, I need some recommendations please.

I am looking for a password manager that supports AutoFill in Safari on Mac as well as iOS.
Migrating away from LastPass, which is absolute ASS on Mac ... 😬

I have tried out Dashlane and Minimalist after checking out the TLDR of this thread, but both of their Autofill solutions are broken on Mac with no ETA when/IF they will fix it. 🙄

I don't mind a subscription at all, willing to pay for ease of use and peace of mind.
Please don't suggest something where you have to host an own server or locally or whatever, I want it in the cloud, no complicated setups requiring hacker skills 😅

what different about Apple Autofill than regular password manager autofill?

As most know, Apple’s AutoFill only works for Safari on macOS. And Minimalist doesn’t have a solution for other browsers. So if AutoFill is not currently working for Minimalist users, it must be pretty tough for them on the Mac right now.

Additionally, Minimalist doesn’t allow you to keep your vault local, as you have to sync via iCloud.

Finally, Minimalist is now available only via subscription ($4.99/month or $29.99/year).

There must be reasons why people use Minimalist, but those aren’t clear to me at all.

I do not think much people are using minimalist.

 

[MacBH928]

AgileBits/1Password wasn't hacked, but the optics for this look bad. But it does beg to ask the question: would any of this have happened if they still offered standalone vaults?

No, 1Password wasn’t hacked – here’s what really happened

1Password users recently got a worrying alert saying their password manager Secret Keys had been changed behind their backs. Yet all was not what it seemed.

www.digitaltrends.com

BL.

from AI summarizer:

"The issue was caused by an error code sent by 1Password's servers in the US to users' apps, which those apps interpreted incorrectly, leading to the worrisome message."

This is what scares me about cloud password manager especially when its closed source. You never know what the employee do that will jam or leak everything.

---

Speaking of stand alone vaults, didn't you decide to go with Bitwarden? or do you host local server?

 

[maflynn]

Heads up: Proton is releasing their own password manager it seems

I think once we saw NordVPN do it, other VPN companies are jumping on the bandwagon. I'm not saying this a bad move, I actually like Proton given their privacy stance.

 

[MacBH928]

I think once we saw NordVPN do it, other VPN companies are jumping on the bandwagon. I'm not saying this a bad move, I actually like Proton given their privacy stance.

yes nord has a password manager but who trusts Nord? Proton (to me) is a lot more trust worthy and professional.

 

[MacBH928]

Speaking of Bitwarden and changing KDF. I know nothing but after a bit of search this guy who seems to know something about the topic seem to say Bitwarden default KDF is the worst, Argon2id is better, but best is bscrypt

While I have no idea what all this means, idk why Bitwarden doesn't switch and default everyone to the best "bscrypt" and changing the KDF seems some seriously advanced stuff so maybe keep that settings hidden in the background and keep the user in the mindset of "it just works'

 

[MisterSavage]

Speaking of Bitwarden and changing KDF. I know nothing but after a bit of search this guy who seems to know something about the topic seem to say Bitwarden default KDF is the worst, Argon2id is better, but best is bscrypt

While I have no idea what all this means, idk why Bitwarden doesn't switch and default everyone to the best "bscrypt" and changing the KDF seems some seriously advanced stuff so maybe keep that settings hidden in the background and keep the user in the mindset of "it just works'

Yeah I changed mine to Argon2id a while ago.

 

[Samu25]

I highly recommend Strongbox.

That said, You'll find that Enpass allows you to keep your data local to you, across multiple devices, and does support autofill. Additionally, no complicated setup is required, as you can turn on WiFi sync to sync your data across those devices.

I have been using PasswordWallet from Selznick Scientific for many years. It uses local storage for its db but can sync multiple devices and is available for macOS, iOS, Windows and Android (unsure about Linux). Versions are available for a one-time license fee. I have no connection to the company; just a satisfied customer.

Check out Bitwarden

The UI is kind of ugly and clunky, but I'm very happy with Bitwarden. 95% of what I use it for is autofill. It wouldn't cost you anything to try it.

Thank you all for the recommendations! I appreciate it. Will check them out.

 

[Samu25]

Funny thing here is that those solutions you are looking for are the reasons people are migrating away from them. Again, having that data in the cloud is convenient, but as you have read on the hacking incidents with Dashlane and LastPass, to paraphrase Ben Franklin, when you sacrifice security for convenience and peace of mind, you may end up losing both.

With LastPass and Dashlane both getting hacked and users' data being exposed/stolen, your peace of mind in having it in the cloud is lost because you are no longer in control of your data, and the convenience of having it in a centralized location meant that it was easier for hackers to get to multiple people's data. That is a huge risk for convenience and ease.

I get that many people in this thread want to migrate away from this kind of stuff. I just posted here because it seemed to be the biggest and most active thread on password managers...

I understand your warning... But, personally I just prefer convenience.
Especially with Dashlane, they claim due to their Zero-Knowledge-Architecture, if they got hacked, hackers can't get any important stuff. So I don't mind having my stuff in the Cloud...
Also, according to Dashlane's website, they have never been hacked? 🧐

As most know, Apple’s AutoFill only works for Safari on macOS. And Minimalist doesn’t have a solution for other browsers. So if AutoFill is not currently working for Minimalist users, it must be pretty tough for them on the Mac right now.

Yeah honestly Minimalist users are f*cked right now lol.
If Apple doesn't fix this, Minimalist's business model also has no future. Relying solely on Apple's native solutions seems risky.

 

[bradl]

from AI summarizer:

"The issue was caused by an error code sent by 1Password's servers in the US to users' apps, which those apps interpreted incorrectly, leading to the worrisome message."

This is what scares me about cloud password manager especially when its closed source. You never know what the employee do that will jam or leak everything.

---

Speaking of stand alone vaults, didn't you decide to go with Bitwarden? or do you host local server?

I went with Enpass, and sync between my iDevices, Mac, and PC over WiFi, and back up my vaults to my NAS, then back up the NAS, so I'm triple covered.

That said, one thing that we all know about popularity: something always wants to bring you down. In this case, it goes to 1Password and KeePass, as they are now being actively targeted by malware.

This vicious new malware version is now targeting password managers

1Password and KeePass are the new targets

www.techradar.com

More blood and guts on what it does is here.

ViperSoftX info-stealing malware now targets password managers

A new version of the ViperSoftX information-stealing malware has been discovered with a broader range of targets, including targeting the KeePass and 1Password password managers.

www.bleepingcomputer.com

So not only is it going after crypto, but it is also going after the well known/used password managers via its extensions, and more. For those that have 1Password and a subscription, does their install process automatically have an extension installed in a given browser to communicate with your vault?

BL.

 

[Samu25]

I highly recommend Strongbox.

Hi. Thx for the recommendation, I am currently trying Strongbox and am liking the UI and functionality. AutoFill also works great!

 

[toasted ICT]

AutoFill also works great!

Better still no additional security threat vector.... If you use Safari on Mac iPhone or iPad the advantage is no browser extension is needed or used. Strongbox uses the Apple native built in AutoFill .... a feature I appreciate.