Live data from Hacker News

1Password X: A look at the future of 1Password in the browser

blog.agilebits.com

111–120 of 181 posts

Re: 1Password X: A look at the future of 1Password in the browser

#111

Am I the only one in here who loves their hosted solutions? We use Teams at work and I use Family for my wife and I. It's important to me that I have access to certain passwords on my desktop, laptop and phone. These items also need to be accessible to others who should be able to view/edit. There's no way to do with without some sort of cloud solution and so the decision becomes which cloud solution. I used to use D…

What part is actually hosted here? Do they store opaque encrypted blobs and pass those around, or can they see the actual secrets too?

Disclosure: I work for AgileBits, makers of 1Password

We outline the entirety of how this works in our white paper:

https://1pw.ca/whitepaper

We cannot tell what your data is. It's encrypted on your device using keys that only you know. Then we store it on our side on the server.

The unique solution of using your Master Password and your Secret Key, makes brute forcing the data on our server an incredibly expensive job for anyone attempting to do so. It makes our servers an absolutely terrible target.

I definitely recommend reading the white paper, it's quite easy to read, even if you aren't super interested in cryptography. If you have questions though just let me know. I'll make sure you get answers.

Kyle

AgileBits

Re: 1Password X: A look at the future of 1Password in the browser

#112

As a long-time happy customer of 1Password I have quite a bit of a problem with them pushing their new hosted product. If you want to offer that as an alternative by all means do but don't make it the only long-term option. I would have no problem with paying a monthly fee or paying for every major version (as I have done in the past when applicable) but I think for this use case being able to choose where to host yo…

Disclosure: I work for AgileBits, makers of 1Password

I hear you on this, but having years of experience using other sync platforms and having to work within their unique solutions has proven to us that to have the best experience it's best to have a solution designed for your application.

Every sync solution has their own gotchas and dealing with it in 1Password is incredibly tricky. I get the feeling that many people think sync is this easy thing that takes a week and you're done. We are still fixing bugs in our various sync solutions and they've been released to users for years.

Want an example of how each solution is weird for us?

Lets take Master Password changes as an example. If you want grittier details, our blog post on the topic here gives a really nice overview:

https://blog.agilebits.com/2015/04/28/how-1password-syncs-ch...

But because of how Dropbox works, we have to:

1. Change the Master Password on one device, let it sync

2. Unlock the other device, let it sync, lock, then unlock again

With iCloud,

1. Is the same as above: Change the Master Password on one device, let it sync

2. Unlock the other device with the new Master Password.

Very different behaviors and that's just two sync solutions. Adding additional sync solutions would result in similar oddities between them.

This type of inconsistent behavior is very difficult to explain to users when things go wrong. They don't want to know these details. They pay us to not know these details.

We can't provide a consistent experience with other sync solutions. But we can if we provide our own. Things work the way users expect because we can design the solution to work like that because we control the entire solution.

This is just coming from a developer who has been doing support with AgileBits for nearly 6 years. I was the last line of defense between our customers and our users when they wrote in. I seen all the messy stuff that users can find their ways into when things do not work how they expect.

I happily welcome our new solution because we can design 1Password in a way that makes sense and is actually incredibly secure as well.

That said, if you don't like our hosted solution... have you tried it? If not well... don't knock something you haven't tried. But if you have tried it and don't like it I'd love to hear your feedback. Seriously. I welcome your feedback if you have any after trying it. We love talking with our users and finding ways to make 1Password better. We wouldn't be where we are without our users.

Anyway, if you don't like our hosted solution we offer standalone licenses and version 7 for Mac and version 7 for Windows will both be available as standalone licensed versions with standalone vaults just like you're used to. Nothing changes for users like yourself if they wish to continue using that variation of options.

Kyle

AgileBits

Re: 1Password X: A look at the future of 1Password in the browser

#113

I have used 1Password for half a decade, but I'm pretty disgusted by agilebits behavior as they continue to shove non-cloud users aside. The amount of customer goodwill they've burned is astounding. I think it's time to start looking elsewhere for a password manager solution.

Disclosure: I work for AgileBits, makers of 1Password

I'm sorry you feel that way.

What makes you think we're pushing you aside?

We are still introducing features in 1Password 6 for Mac, and 1Password 7 for iOS that work for both our hosted solution and our standalone users.

We are able to offer a lot of newer features to our 1Password.com membership users because that solution opens a lot of new possibilities. But we certainly haven't forgotten about users like yourself.

1Password 6.9 for iOS introduced Drag and Drop for iPad users

1Password 7 for iOS introduced Face ID, a new favorites screen, Quick Copy, and a host of other smaller features and improvements

We're not stopping there either and have even more great new features lined up that will work for both our standalone users and our 1Password.com users.

1Password 7 was also a free upgrade for any iOS user, including those that had Premium features purchased.

I'd love to hear how you think we're pushing you aside though because it'll help me understand how we can try to improve our language in various release notes and announcements to make it clear we aren't leaving you behind.

Thanks!

Kyle

AgileBits

Re: 1Password X: A look at the future of 1Password in the browser

#114
post #7

Was excited to read "Linux users and Chrome OS users could join in on the fun?" but then ". It works everywhere Chrome works" so still no love for Firefox users... Too bad the CLI is possibly the worse CLI ever made, otherwise Firefox support wouldn't have been so important.

Disclosure: I work for AgileBits, makers of 1Password

I suspect that browser support for 1Password X will continue to expand over time, but focusing on one browser first helped us make it available sooner rather than later.

Out of curiosity, what exactly do you not like about our CLI? It offers a ton of flexibility, perhaps that's part of the problem. If you have concrete issues though I'd love to make sure we get that recorded for our team.

Kyle

AgileBits

Re: 1Password X: A look at the future of 1Password in the browser

#115

There is a segment of your users that still want the original 'on-prem' version that you started out with. These nerds have money and understand you want a sustainable business model. Just charge these people an annual software maintenance fee and stop neglecting the standalone version. Yes it wont satisfy everyone, but it will stop all the negative PR that comes out whenever you do something that is artificially clo…

Disclosure: I work for AgileBits, makers of 1Password

How are we neglecting our standalone users? I'm really curious here because we are still introducing features in our existing applications that work for our standalone users.

Certain new applications like 1Password X and our CLI are only really easily possible because of 1Password.com, but just because these are being offered doesn't mean we're neglecting our standalone users.

Just recently in 1Password 7 for iOS, we added Face ID support, a new favorites screen, and Quick Copy, among others. In 1Password 6.9 we added Drag and Drop support. None of these features are unique to 1Password.com, they work for everyone and they were free for existing users as well.

Really curious how we're neglecting you though. I'd love to understand this so I can make sure we address it better.

Kyle

AgileBits

Re: 1Password X: A look at the future of 1Password in the browser

#116

Am I the only one in here who loves their hosted solutions? We use Teams at work and I use Family for my wife and I. It's important to me that I have access to certain passwords on my desktop, laptop and phone. These items also need to be accessible to others who should be able to view/edit. There's no way to do with without some sort of cloud solution and so the decision becomes which cloud solution. I used to use D…

I'm syncing passwords between devices, but I'm not using "the" cloud.

I self-host ownCloud. I use their clients for syncing on desktop, and a separate utility on Android for syncing my 1Password vault to my phone. My data never leaves my hands.

My thinking, besides just general paranoia, is that while AgileBits is probably more competent than I am when it comes to securing and administering their infrastructure, their infrastructure is also a much bigger target.

It's unlikely -- given my general lack of doing anything interesting or controversial with my life -- that I will ever be specifically targetted. It's much more likely that I will become collateral damage. e.g., https://www.theregister.co.uk/2012/03/02/linode_bitcoin_heis...

Re: 1Password X: A look at the future of 1Password in the browser

#117
post #46

I purchased the standalone Mac 1Password app, but moved back to LastPass. I hate LastPass, and want to use 1P but LP just seems to work better. Despite being bloated and ugly. Admittedly, I haven't tried 1P for around a year now. So as I have a license, I have been tempted to go back. Is it worth it? My biggest gripe is in Chrome on iOS. Nothing ever seems to be able to autofill correctly and the UX is just horrible.…

Exactly my sentiments. I want to like 1Password so much, I've even purchased it and used it but I had to store it in dropbox or something and then it had to sync with my phone which repeated failed. Things just didn't work well. This was awhile back but I remember hating my experience with it and moved on.

Now I've been using Lastpass for awhile (years?!) and it works pretty well - doesn't interrupt my workflow much but like you said it's really ugly. I've almost gone back to 1Password just by seeing screenshots and wishing that's what password my manager looked like.

Re: 1Password X: A look at the future of 1Password in the browser

#118
post #106
post #26

Former LastPass employee here. Looks to me like 1Password is going full LastPass. First fully hosted passwords. Now support for extension only (which is way worse security wise). SaaS margins and recurring revenue is better, and I guess their previous model was killing 1Password.

Disclosure: I work for AgileBits, makers of 1Password Hello fellow (or former) password manager person! Fancy seeing you here. The previous model wasn't killing us, in fact it isn't even "previous" because we still offer standalone licenses for those that want them and will continue to do so. For those who aren't aware of our upgrade cycle in the past: For Mac, we last charged for 1Password 4 back in 2013. Version 5…

I'm a bugcrowd customer too, but offering a prize to say you are secure is a fallacy. It's also not how bugbounties work... Example: - https://moxie.org/blog/telegram-crypto-challenge/

The fact remains the same that the things you championed against LastPass doing are now the features and products you are providing.

You guys have already been caught erasing and hiding the previous versions on your site to convert people to 1Password.com.

I don't really care about any of this since but you guys are just not being sincere about the things you're doing. It's kind of sad.

Re: 1Password X: A look at the future of 1Password in the browser

#119

Earlier quoted context omitted.

They haven't lost any good will that matters in the long run. I find 1Password valuable enough to pay them a monthly fee and so do many many others. They changed their business model to be more sustainable/profitable and they know that means that they'll lose a segment of customers but that's OK. The products that won't do well with a business model like this are products that don't provide enough value. There is not…

For me, it is both about the business model and the move to a hosted service. I’m against renting tools. I will gladly buy them, and I will buy frequent-ish updates (18-24 months). I'm not cheap. I simply value ownership of both the software and my data. I have bought five 1Password licenses for myself and my immediate family; a roughly ~$300-$320 investment. Toss on another $50 for iOS licenses and you have roughly…

Disclosure: I work for AgileBits, makers of 1Password

To be clear, we aren't "moving to a hosted service."

We still offer the Pro features for iOS for $10 for users who want to purchase that instead of a subscription.

We still offer 1Password 6 licenses for Mac, they're available via the Mac App Store, our website, and in app after the trial period ends. We have also announced we'll be offering 1Password 7 licenses when we release that in the future.

We have also announced we'll be offering standalone vaults and traditional licenses for 1Password 7 for Windows.

So nothing is "moving to a hosted service." It's simply another option and it's also the option we feel is best for a vast majority of our users, that may not be you that falls in that category, but you're also reading hacker news, you're not in the same category as a majority of our users either.

Hope that helps a little at least.

Kyle

AgileBits

Re: 1Password X: A look at the future of 1Password in the browser

#120
post #113

I have used 1Password for half a decade, but I'm pretty disgusted by agilebits behavior as they continue to shove non-cloud users aside. The amount of customer goodwill they've burned is astounding. I think it's time to start looking elsewhere for a password manager solution.

Disclosure: I work for AgileBits, makers of 1Password I'm sorry you feel that way. What makes you think we're pushing you aside? We are still introducing features in 1Password 6 for Mac, and 1Password 7 for iOS that work for both our hosted solution and our standalone users. We are able to offer a lot of newer features to our 1Password.com membership users because that solution opens a lot of new possibilities. But w…

I'm just wondering, does your period subscription license also include your "stand-alone" software?
Post reply on HN