Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: How comfortable do you feel using cloud-based password managers?

news.ycombinator.com

Post reply on HN
Print view View original

161–170 of 199 posts

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#161

Post by DavideNL »

19ylram49 wrote: post #138
FussyZeus wrote: post #129

Earlier quoted context omitted.

I love 1Password but haven't upgraded specifically because of the cloud service. All my stuff is already in Dropbox, and 1Password essentially came to it's old users touting a subscription fee to a functionally identical service. Why am I paying them every month to store my passwords when I'm already storing them myself? I'm sure I'll have to cave at some point what with the ongoing march of progress, but it leaves a…

I’m actually on the same boat, and I haven’t been able to upgrade to any of the newer releases of 1Password due to this. I feel exactly the same way. I refuse to cave though!

> and I haven’t been able to upgrade to any of the newer releases

Why not, i use iCloud to store my 1Password data, and i still use the latest macOS 1Password version (7 i believe). It's a standalone app without a subscription (i would never pay for a subscription just because they tacked on a cloud service I don't need, to justify the subscription model...)

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#162

Post by sersi »

jonathankoren wrote: post #145
19ylram49 wrote: post #138

Earlier quoted context omitted.

I’m actually on the same boat, and I haven’t been able to upgrade to any of the newer releases of 1Password due to this. I feel exactly the same way. I refuse to cave though!

The only feature I’m missing with my old old 1Password is Have I Been Pwned integration, and that seems iffy now that it’s shutting down. Software has switched to a subscriptions, but They don’t offer any benefit over the original purchase price structure to users. It feels like the ultimate admission that the product has reached maturity, and so it’s time to rent seek. I’ve considered switching to Bitwarden or Firef…

I upgraded to 7 with the license payment ($49 seemed fair to me). Biggest value add with the upgrade is the google authenticator integration which is useful for sites that support it.

I would stop upgrading if agilebits ever drop local vault support though.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#163

Post by UncleMeat »

benburleson wrote: post #88
bagacrap wrote: post #81

Earlier quoted context omitted.

Your browser sends and receives tons of packets to addresses owned by the browser vendor and third party sites. After all that's its main function. Your open source browser is millions of lines of code. You think it would not be possible to exfiltrate passwords without your notice? It seems a much more practical approach to assume your browser vendor is a "good guy", as the alternative model is that you choose to do…

I think the premise is we would know if it already did that, and incremental code changes can be inspected to see it isn't added. So yeah, it's pretty safe to say open source makes it trustable.

People inspect chrome diffs for weird changes too. Closed source software does not prevent people from noticing malware, especially in some of the most heavily scrutinized software in the world.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#164

Post by benhurmarcel »

kennu wrote: post #93

1Password has always offered the best usability for me. Many other password managers (eg LastPass) have failed, for instance, to work with the AWS sign in page and some other tricky websites. 1Password UX is also well polished in other ways and is nice to use. I consider this kind of good usability to significantly increase my quality of life, since I login to various online services all the time and I want to elimin…

The main issue of 1Password is the subpart Linux support (there only are browser extensions).

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#165

Post by 19ylram49 »

DavideNL wrote: post #161
19ylram49 wrote: post #138

Earlier quoted context omitted.

I’m actually on the same boat, and I haven’t been able to upgrade to any of the newer releases of 1Password due to this. I feel exactly the same way. I refuse to cave though!

> and I haven’t been able to upgrade to any of the newer releases Why not, i use iCloud to store my 1Password data, and i still use the latest macOS 1Password version (7 i believe). It's a standalone app without a subscription (i would never pay for a subscription just because they tacked on a cloud service I don't need, to justify the subscription model...)

Maybe it’s different for iCloud users, because 1Password doesn’t let me upgrade to version 7 without paying for a cloud subscription (by the way, I use Dropbox for my data).

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#166

Post by benhurmarcel »

Fnoord wrote: post #68
octosphere wrote: post #63

Earlier quoted context omitted.

> You can run the server within your own cloud For me there is a tradeoff. On one hand, Bitwarden's online offering where you trust them with your data is convenient, but also a single point of failure. If their server goes offline, you can't access your passwords (And servers do go down). On the other hand you can repair your own instance if it goes down and have full control over it. The only caveat with self-hosti…

Agreed w/your post in general. > On one hand, Bitwarden's online offering where you trust them with your data is convenient, but also a single point of failure. Put your network connectivity off, and try to relogin to Bitwarden. It will work. I just tried it. The only downside is that the database might not be synced (which, I admit, can be a problem). > The only caveat with self-hosting being the overhead. Regular n…

>Put your network connectivity off, and try to relogin to Bitwarden. It will work.

That's correct, but the parent comment is also correct about the single point of failure. The Bitwarden server could erase your database for some reason (bug, hack…), and it would sync on all your devices, erasing all your data.

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#167

Post by sdan »

333c wrote: post #91
bagacrap wrote: post #82

Earlier quoted context omitted.

What support does it have for mobile?

There are iOS and android apps. I can't speak for the android apps, but I use an open-source client on iOS. https://itunes.apple.com/us/app/pass-password-store/id120582...

I recently had to uninstall it because passwords weren't syncing with Apple Keychain. Should Pass for iOS sync with Apple Keychain in the first place?

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#169

Post by Jolter »

lukasm wrote: post #43

I use a hybrid approach with Lastpass used as a password entropy storage. For important services like Github I only store half of the password in LastPass. Then I add a nonce and a generic short password. The final password is 12-16 random characters for LastPass + 3 chars Nonce that I generate from the service name (in my head) and a short 5 character password. If LastPass leaks the secrets no one is able to take ov…

Doesn't nonce mean "number used once"? Seems like you would have to use the same number every time, no?

Re: Ask HN: How comfortable do you feel using cloud-based password managers?

#170

Post by chrizel »

benhurmarcel wrote: post #164
kennu wrote: post #93

1Password has always offered the best usability for me. Many other password managers (eg LastPass) have failed, for instance, to work with the AWS sign in page and some other tricky websites. 1Password UX is also well polished in other ways and is nice to use. I consider this kind of good usability to significantly increase my quality of life, since I login to various online services all the time and I want to elimin…

The main issue of 1Password is the subpart Linux support (there only are browser extensions).

There is also a command line application: https://support.1password.com/command-line-getting-started/
Post reply on HN