1Password migrants thread

[MacBH928]

Sure it is - again, its not affecting you, you moved off the platform, so there's even less reasons for you to run the 1Password app

Here's the thing, people are getting wound up about ram usage but have yet to provide details as to why this impacting their system negatively. I'm not saying its not a problem but I've yet to see people provide concrete examples of their system being negatively affected. My 14" MBP has not had any issues with 1Password but as I mentioned I rarely use the app

you are not wrong to say from a user experience POV , has 1password RAM usage hindered your experience? I would imagine the answer is no. Currently I am running Firefox I think its taking 1GB altogether and my system is flying for all i care, its 8GB RAM 2015 MBP

 

[workerbee]

I did a little more digging and I'm not seeing anything close to the ram utilizatioin that @workerbee displayed.

I just installed the Safari plugin, as I'm a chrome user, but the uptime of my Mac is 42 days and clearly ram usage is quite good
View attachment 2246054

No idea what's going on here: after reading your comment I just opened Activity Monitor, and RAM usage is still or again bordering the ridiculous for an app that basically displays minuscule text bits.

 

[eltoslightfoot]

No idea what's going on here: after reading your comment I just opened Activity Monitor, and RAM usage is still or again bordering the ridiculous for an app that basically displays minuscule text bits.
View attachment 2248848

That is actually pretty low in this day and age...I use bitwarden and it is at 370MB.

 

[MacBH928]

That is actually pretty low in this day and age...I use bitwarden and it is at 370MB.

his combination is 990MB

 

[eltoslightfoot]

his combination is 990MB

Ah, I see that now. I just saw the icon and called it a day LOL. Yeah, not good, but is it actually turning into a slow down on the machine? Mac tends to report high usage but not have it matter much.

 

[workerbee]

Ah, I see that now. I just saw the icon and called it a day LOL. Yeah, not good, but is it actually turning into a slow down on the machine? Mac tends to report high usage but not have it matter much.

No, it doesn't slow down my mac or anything, but I'm still quite unhappy about it. Doing more or less the exact same thing with a few hundred passwords more, (macOS-native) Elpass never used much more than ~130MB all in all.

I see no reason why we should just accept sloppy stuff like this and be happy to pay for it, especially not from a well-funded company that has loads of resources and could do – actually used to do – much, much better.

This is 1PW right now, after a reboot yesterday evening:
(edit: image uploads don't work. All in all, 1PW with all Helpers and Safari extension currently is using around ~620MB RAM)

 

[eltoslightfoot]

No, it doesn't slow down my mac or anything, but I'm still quite unhappy about it. Doing more or less the exact same thing with a few hundred passwords more, (macOS-native) Elpass never used much more than ~130MB all in all.

I see no reason why we should just accept sloppy stuff like this and be happy to pay for it, especially not from a well-funded company that has loads of resources and could do – actually used to do – much, much better.

This is 1PW right now, after a reboot yesterday evening:
(edit: image uploads don't work. All in all, 1PW with all Helpers and Safari extension currently is using around ~620MB RAM)

I mean I really can't argue with that. I pay WAY less for bitwarden. To me, if you are going to go to subscription, it should be like 20% of what the app cost MAX. That would make it like $15 a year for 1Password.

Of course, I switched way back (I think version 4?) when they first announced they were going subscription and made the old one stop working correctly. (I might be remembering wrong--I just remember being irritated enough to switch to a competitor.)

 

[maflynn]

No idea what's going on here: after reading your comment I just opened Activity Monitor, and RAM usage is still or again bordering the ridiculous for an app that basically displays minuscule text bits.

Odd to be sure, as I mentioned, my experience is different then yours. What version of MACOS are you running?

I'm on Ventura, and I just opened up Activity Monitor and the results don't look anywhere near your utilization.

 

[svenmany]

No, it doesn't slow down my mac or anything, but I'm still quite unhappy about it. Doing more or less the exact same thing with a few hundred passwords more, (macOS-native) Elpass never used much more than ~130MB all in all.

I see no reason why we should just accept sloppy stuff like this and be happy to pay for it, especially not from a well-funded company that has loads of resources and could do – actually used to do – much, much better.

This is 1PW right now, after a reboot yesterday evening:
(edit: image uploads don't work. All in all, 1PW with all Helpers and Safari extension currently is using around ~620MB RAM)

I would be unhappy about it too.

Any chance you contacted 1Password support?

 

[dmbfan36]

No idea what's going on here: after reading your comment I just opened Activity Monitor, and RAM usage is still or again bordering the ridiculous for an app that basically displays minuscule text bits.
View attachment 2248848

When was the last time you restarted Safari? My usage is much lower for the Safari extension...

 

[svenmany]

I opened all my family vaults in the extension and managed to push the memory up to 400 MB. I had to scroll around and selected many passwords to get the memory to grow. But, after I left it for a bit, it recovered and dropped back down to < 150 MB.

I have this nagging feeling that some particular password entry can trigger a bug in the extension that prevents garbage collection from reclaiming the memory.

It would be really good to give 1Password a chance to address this.

 

[MacUser09]

Received an email that ExpressVPN are introducing a password manager as an addition to their VPN service. Called Keys.

https://www.expressvpn.com/keys?utm...ng&utm_medium=email&utm_source=customer_email

 

[maflynn]

Received an email that ExpressVPN

Seems to be the popular move by VPN makers, I found ProtonVPN's to be a bit lackluster. I'm happy with what I have currently. As I googled it, it seems rather sparse feature wise, but it may be a good fit for some

 

[svenmany]

I would give a new password manager a couple of years before trusting it. It can take a while to uncover and fix vulnerabilities that are initially introduced. If they purchased the product then due diligence would have to be applied to the original company's software and its track record.

 

[MacBH928]

I see no reason why we should just accept sloppy stuff like this and be happy to pay for it, especially not from a well-funded company that has loads of resources and could do – actually used to do – much, much better.

and not from a $30 subscription a year! You are right, we have no reason to accept this sloppy stuff and this is the reason behind this thread, to see what is out there and inspire competition so no 1 player controls the market.

I found ProtonVPN's to be a bit lackluster. I'm happy with what I have currently. As I googled it, it seems rather sparse feature wise, but it may be a good fit for some

Maybe I said this before but, it is, but I have seen Proton product start as a seed then grow much more feature full. The time might not be now, but it might be in 3 years to be a serious competitor.

it makes a nice addition to their suite and one less subscription to worry about else where.

 

[workerbee]

Apart from all the valid reasons above why I'm quite disappointed with 1PW, I have to say that the procedure for inviting family members into an account is so convoluted as to be completely baffling and incredibly frustrating.

The way 1PW mixes existing previous accounts and the 1pw.com vs. 1pw.eu servers makes this nearly unusable. Took me hours to get one account working and connected, and now we're again wasting hours trying to get another account to connect to the correct instance.

Right now if Secrets 4.1 was out and was as fast as I expect it to with my large-ish number of passwords, I'd toss 1PW out, $60 be damned, and switch to something far simpler and hopefully more sanity-preserving.

 

[toasted ICT]

Keeping passwords on the developers internet hosted server... what could go wrong?

"some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults"

Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach – Krebs on Security

 

[maflynn]

stolen LastPass vaults

I would hope that any lastpass user would have gone through the hassle of changing all of his/her passwords, BUT the way Lastpass communicated the info, that gave the hackers plenty of time to work on their cracking endeavors

Horrible move to use live production data in non-production. In my company and in my team, if we move production data to non-production there is a level of masking that occurs, i.e., wiping out emails etc.

 

[maflynn]

I will say that 1Password's use of a secret key is a huge benefit. I mentioned this in the 1Password Remigrant thread. I decided to return to 1PW and one of the major factors that 1PW has over its competitors, is that secret key.

I was using Bitwarden, and its a great app, don't get me wrong, but 1PW's had advantages for me.

 

[MacBH928]

I will say that 1Password's use of a secret key is a huge benefit. I mentioned this in the 1Password Remigrant thread. I decided to return to 1PW and one of the major factors that 1PW has over its competitors, is that secret key.

I was using Bitwarden, and its a great app, don't get me wrong, but 1PW's had advantages for me.

is the secret key basically the new passkeys technology?

 

[maflynn]

is the secret key basically the new passkeys technology?

I don't think so,

Here's what 1PW has to say
Secret Key: What is it, and how does it protect you?

Enter the Secret Key
The 1Password Secret Key changes all of that. It makes the verifiers that we store on our servers completely useless for cracking purposes. Molly’s 128-bit Secret Key gets combined with her rather weak password on her own machine. It’s secret from us and our servers. Recall that no secrets are transmitted from Molly’s 1Password client to our servers when Molly signs into her account. It isn’t merely that we never store her Secret Key – we never even have the opportunity to acquire it.

and
About your Secret Key

How your Secret Key protects you
The chart shows that 1Password account password entropy ranges from 15-60 bits. Combined with a Secret Key, it has 128+ bits of entropy.

Your Secret Key and your 1Password account password both protect your data. They’re combined to create the full encryption key that encrypts everything you store in 1Password.

I'll be honest, I'm unsure how this works when you change your account password - are all of your passwords re-encrypted if in fact the encryption key is made up of your password and the secret key?

 

[svenmany]

I'll be honest, I'm unsure how this works when you change your account password - are all of your passwords re-encrypted if in fact the encryption key is made up of your password and the secret key?

I really don't know, but I have some intuition which might apply to 1Password. There is an internal key that is used to encrypt all of your content. It is that internal key that is encrypted with your password/secret key. So, changing any credentials that you have access to only requires a re-encryption of the internal key.

 

[maflynn]

but I have some intuition which might apply to 1Password.

I think you're right.
How 1Password syncs changes to your Master Password

Syncing Master Password Changes​

When you change the Master Password of a vault on one device, the same process that happens locally for a Master Password change happens to the sync vault. We re-encrypt its AES key with the new derived key. This makes the sync vault’s Master Password the same as the new local Master Password. To read data within this vault you need either the new Master Password or a copy of its AES key.

So your password/secretkey is used to encrypted the AES key that is used to encrypt your data on the servers - if I read this correctly.

 

[eltoslightfoot]

Not gonna lie, this is making me finally want to put in the effort to get Bitwarden hosted on my local cloud server and not even have it out on the internet--the safest of all. LOL.

 

[maflynn]

Bitwarden hosted on my local cloud server

But if you do that, are you not kicking the can of trust down the line? What I mean by that, if you use BW, 1PW, or whatnot. You're trusting their processes are such to protect your vaults. If you host it on your cloud based system, then you're trusting that cloud based system's security.

I don't have enough knowledge in that area to actively ensure my data will be just as protected as if it was hosted by a password manager. I'm not saying you can't, its me that lacks the knowledge. But as I see it, you need to ensure the cloud system you're using does their due diligence.