iCloud Keychain or 1Password?

[Endlessgo]

Hello,

I'm currently in the situation where I don't know what to chose. I'm mainly using Apple products since 2 years and I'm looking for a solid and good password manager. I came across 1Password which has a very good reputation and apps like Enpass. Is it good and recommend to use such services for password management? I could also use the iCloud Keychain feature but it is cloud only and I also don't know how secure it is to use. Are there any advantaged of 1Password or Enpass / Lastpass? Do you have any experiences with these kind of apps? What would you recommend and why?

sincerely

Endlessgo

 

[techwarrior]

Been using 1Password for several years. I find Keychain to be useful for browser passwords, but inconvenient for other stuff like apps and other types of data. 1 Password securely stores Social Security, SW license keys, Passports, and a few other things that are not well suited to Keychain.

1Password is cross platform, so users with Android or Windows devices can keep passwords synced across devices.

iCloud keychain still stores locally, but uses iCloud to sync with other Apple devices. It is secure, but make sure you have 2 Factor Authentication setup for added security.

Never tried Enpass, but used LastPass in the past. Lastpass had some security issues a while back, probably resolved by now but would give me pause. I recall LastPass lacks some of the added features of 1Password, but again they may have closed the gap in recent years. My recollection of LP is everything is in the browser and not a separate app. 1Password is an app into itself, so a clean vault for storing all of the secure stuff.

A nice added feature in 1Password is Watchtower. This audits your logins, identifies accounts with services that have been compromised and recommends updating these logins. Also keeps track of aging, so if you prefer rotating passwords every so often for added security, nice to have the app track it for you.

 

[Frankfurt]

I use keychain, but all my devices are Apple devices (MBP, iPad, iPhone). Keychain does not help with in App passwords, otherwise I have not had any issues. Given it is free and 1Password is now quite expensive, I will stick with keychain as long as I navigate only in the Apple ecosystem.

 

[jojoba]

I've used 1Password for some time and I've been very happy with it. I have an android phone so the cross platform feature has been very useful. However, I generally don't use subscription software so when my one-off-purchase is no longer supported I will find another alternative.

 

[Rendergroup]

I've been using Endpass and it's quite good a very similar interface with 1Password, but it has some cosmetic options that I like better than 1 Password, any way... you can try both free for one month.

 

[Endlessgo]

How about the security of 1Password and iCloud Keychain? Are there both equally secure or is one of them the better way to go? How about the 1Password membership? The vault is being hosted in the cloud. Same with Apple..

 

[Frankfurt]

As long as you use Two Factor Authentication I view keychain (in the iCloud) as safe.

 

[keithdoc]

I've been a HUGE fan of 1password for ALL of my devices . . . right up to the point they went subscription model.
[I won't rant, but it's a personal character defect on my part to "subscribe" to anything . . . ]

Subscriptions are horrible ideas, for software companies that aren't innovating and constantly improving their product.

If you can find a $65 legacy license - GO for it. You won't be disappointed.
-You can still "ask" them directly for it, though it's no longer advertised.
-It would only allow you to update in same version 6.x
-That's $5 more than you'd pay for a year of subscription.

Question Is . . . .
What to do when a version 7 comes out, with some enhanced functionality that you really like?
You'll be STUCK,unless you "upgrade" . . with the subscription model.

If you have only 1 device, $3/month ain't bad.

If you've got multiple accounts, the $5/month Family Plan is the ONLY option.

Honestly, this company has provided what I consider the MOST essential non-apple software to protect MY most sensitive and critical information, served up to me in an ubiquitous fashion whenever I want it (cloud connected, or not). I've experienced 3 versions, 5-6 different licenses, and many updates - NEVER with any breach or loss of data, never any errors, never any sync issues. Each time, they maintain and enhance the software. I'm going out on a limb, but I've got faith they'll continue on the new model.

THINK of this as Patreon for some awesome software - $60/year for my whole family seems like a steal.

 

[techwarrior]

How about the security of 1Password and iCloud Keychain? Are there both equally secure or is one of them the better way to go? How about the 1Password membership? The vault is being hosted in the cloud. Same with Apple..

Older (one-time purchase) versions of 1Password can use iCloud for sync, newer versions are hosted on their website. There is a lengthy security document they have on their site, worth a read if considering this route.

As for Keychain, definitely setup two-factor authentication.

Both routes, when done right, are about as secure as you will find. Can't say I would put one over the other for security.

 

[CoastalOR]

I use and like 1Password.

Here is a link to the Agilebits Store where the Single License (non-subscription) can be purchased:
https://agilebits.com/store

 

[Endlessgo]

Thanks for the help. Still not sure if 1Password is worth it. There are also managers like Enpass.

 

[Weaselboy]

Still not sure if 1Password is worth it.

I think it depends on your usage. I am completely in the Apple ecosystem (Mac/iPad/iPhone) so Keychain with iCloud syns works perfectly for me and I see zero reason to pay for iPW, particularly given how much it costs.

Keychain has secure note I use for storing things like serial numbers.

If you need cross platform sync, I understand paying for 1PW, but if you are using Apple products, I just never have seen the value.

Let me ask you this. What exactly is it you think 1PW will do for you that you cannot now do free with Keychain/iCloud?

 

[Endlessgo]

I think it depends on your usage. I am completely in the Apple ecosystem (Mac/iPad/iPhone) so Keychain with iCloud syns works perfectly for me and I see zero reason to pay for iPW, particularly given how much it costs.

Keychain has secure note I use for storing things like serial numbers.

If you need cross platform sync, I understand paying for 1PW, but if you are using Apple products, I just never have seen the value.

Let me ask you this. What exactly is it you think 1PW will do for you that you cannot now do free with Keychain/iCloud?

Well I often had the problem when changing passwords. I cloud keychain / Safari didn't recognize the change and I hat to use the "forgot password" feature. Also, somehow, 1 Password looks nice. But yeah, I don't think there is much more value when using it, isn't it?

 

[Weaselboy]

Well I often had the problem when changing passwords. I cloud keychain / Safari didn't recognize the change and I hat to use the "forgot password" feature. Also, somehow, 1 Password looks nice. But yeah, I don't think there is much more value when using it, isn't it?

I had that happen before also, but not for quite a while. I wonder if it was a bug that was fixed with a Sierra update.

Like I said, if you look at the feature set of 1PW and you find a "gotta have" feature that makes it worth the money for you... then go for it. But for my usage, I just don't see it.

 

[ZapNZs]

I think 1Password is one of the best single Apps ever made. The amount of time it has saved me is tremendous, and the amount it has improved my security habits is equally tremendous. I love the UI, the cross-platform compatibility, the browser integration, and 7-ish years of continually seamless updates. It's insanely expensive for a password manager App, but IMO it's worth it.

 

[jagooch]

I've been a HUGE fan of 1password for ALL of my devices . . . right up to the point they went subscription model.
[I won't rant, but it's a personal character defect on my part to "subscribe" to anything . . . ]

Subscriptions are horrible ideas, for software companies that aren't innovating and constantly improving their product.

If you can find a $65 legacy license - GO for it. You won't be disappointed.
-You can still "ask" them directly for it, though it's no longer advertised.
-It would only allow you to update in same version 6.x
-That's $5 more than you'd pay for a year of subscription.

Question Is . . . .
What to do when a version 7 comes out, with some enhanced functionality that you really like?
You'll be STUCK,unless you "upgrade" . . with the subscription model.

If you have only 1 device, $3/month ain't bad.

If you've got multiple accounts, the $5/month Family Plan is the ONLY option.

Honestly, this company has provided what I consider the MOST essential non-apple software to protect MY most sensitive and critical information, served up to me in an ubiquitous fashion whenever I want it (cloud connected, or not). I've experienced 3 versions, 5-6 different licenses, and many updates - NEVER with any breach or loss of data, never any errors, never any sync issues. Each time, they maintain and enhance the software. I'm going out on a limb, but I've got faith they'll continue on the new model.

THINK of this as Patreon for some awesome software - $60/year for my whole family seems like a steal.

You know the answer, switch to another app or pay up.

I don't support Patreon. I don' t mind sending a one-time payment to something I support, but I'm complete against subscriptions.

I enjoyed many years as a 1Password user on my Windows, macOS, and iOS devices, but the writing is on the wall. It's time to leave for brighter, non-subscription pastures.
[doublepost=1512874439][/doublepost]

Been using 1Password for several years. I find Keychain to be useful for browser passwords, but inconvenient for other stuff like apps and other types of data. 1 Password securely stores Social Security, SW license keys, Passports, and a few other things that are not well suited to Keychain.

1Password is cross platform, so users with Android or Windows devices can keep passwords synced across devices.

iCloud keychain still stores locally, but uses iCloud to sync with other Apple devices. It is secure, but make sure you have 2 Factor Authentication setup for added security.

Never tried Enpass, but used LastPass in the past. Lastpass had some security issues a while back, probably resolved by now but would give me pause. I recall LastPass lacks some of the added features of 1Password, but again they may have closed the gap in recent years. My recollection of LP is everything is in the browser and not a separate app. 1Password is an app into itself, so a clean vault for storing all of the secure stuff.

A nice added feature in 1Password is Watchtower. This audits your logins, identifies accounts with services that have been compromised and recommends updating these logins. Also keeps track of aging, so if you prefer rotating passwords every so often for added security, nice to have the app track it for you.

Cross platform as in Linux?

 

[techwarrior]

Cross platform as in Linux?

Can't please everyone. Nope, no Linux client for 1Password, though running the Windows version under WINE seems to be a workable solution.

 

[KennethS]

I have been using 1Password for many years, until recently with a stand-alone license. I am totally in the Apple ecosystem (MacBook Air, iMac, iPhone and iPad) and find it seamless and reliable. My wife is all Apple as well, and my two sons are iPhone users with Windows PCs. I recently bought a family license for 1Password and am very happy I did. Everyone in my family is now using the App, for what to me feels a reasonable price for 4 users and all of our Apple devices and their PCs. I like that I can add entries into a shared folder that we all have access to (things like passport information and other things that are useful for all of us to have private access to) and also have a folder that only my wife and I can access (credit card info, bank accounts, etc.). It is extremely flexible in how you can manage and access private data and their support people are excellent in the rare cases I have needed to contact them. I am not a fan of subscription based software but in the case of 1Password and the family plan it is, to me, money well spent.

I also use Keychain, but having all my passwords and secure data available in an app on my phone is invaluable to me.

 

[AGKyle]

You know the answer, switch to another app or pay up.

I don't support Patreon. I don' t mind sending a one-time payment to something I support, but I'm complete against subscriptions.

I enjoyed many years as a 1Password user on my Windows, macOS, and iOS devices, but the writing is on the wall. It's time to leave for brighter, non-subscription pastures.
[doublepost=1512874439][/doublepost]
Cross platform as in Linux?

We have already announced that 1Password 7 for Mac and Windows will provide standalone vaults and traditional licensing options. What you know and use isn't changing. Don't like subscriptions? Don't use our subscription product, keep using the traditional licensing you know and love.

Can't please everyone. Nope, no Linux client for 1Password, though running the Windows version under WINE seems to be a workable solution.

Our new 1Password.com service does have a Chrome extension that works in Chrome. See here

 

[tgara]

I think it depends on your usage. I am completely in the Apple ecosystem (Mac/iPad/iPhone) so Keychain with iCloud syns works perfectly for me and I see zero reason to pay for iPW, particularly given how much it costs.

Keychain has secure note I use for storing things like serial numbers.

If you need cross platform sync, I understand paying for 1PW, but if you are using Apple products, I just never have seen the value.

Let me ask you this. What exactly is it you think 1PW will do for you that you cannot now do free with Keychain/iCloud?

My situation is similar. I have OnePassword (single license, not subscription), but find I use it less and less because I have my most used passwords in Apple Keychain. Other information that I want to keep secure, such as software license codes, drivers license numbers, passport numbers, etc., are kept in a secure Apple Note.

Right now, I'm doing an experiment whereby I've deleted OnePassword from my iPhone and iPad to see if I could get along without it. So far it's been going well, so after the new year, I may drop it from all my devices entirely.

 

[TonyK]

What I like about 1Password is that I can sync between my computer and mobile devices and have all passwords current. Not sure how Keychain Access works in that respect. Looking does not show that it syncs across the devices.

1Password allows me to keep notes in a login item meaning I can track old passwords. Keychain Access has comments and that likely would work for my needs.

But I like the categories available in 1Password which I don't see in Keychain access.

 

[Weaselboy]

What I like about 1Password is that I can sync between my computer and mobile devices and have all passwords current. Not sure how Keychain Access works in that respect. Looking does not show that it syncs across the devices.

Keychain will sync over iCloud.

 

[TonyK]

Contacts and calendars sync via iCould. Anything else is done via local WiFi network. Not a fan of storing that information via the Cloud.

 

[Weaselboy]

Contacts and calendars sync via iCould. Anything else is done via local WiFi network. Not a fan of storing that information via the Cloud.

I'm not sure where you got that from, but iCloud Keychain is synced through iCloud.

The iCloud Keychain information is encrypted in transit and also on the iCloud servers. I do understand if some are not comfortable with that though.

https://support.apple.com/en-us/HT204085

 

[TonyK]

In my iCloud settings I have it turned off so it DOES NOT sync. That is a conscious decision on my part. I don't use Dropbox, Google Drive or other cloud based solutions for storing such sensitive information. I was part of the group way back when AgileBits tried to force us to use Dropbox. We were loud and persistent and AgileBits finally provided a tool to let us continue to sync via USB.

So not everyone is keen to have their information stored in a cloud system and I'm one of them.