Getting 1Password 7 ready for the Mac App Store

Post by kalleboo » Mon, May 21, 2018, 3:54 PM UTC

AGKyle wrote: post #413

Groxx wrote: post #324

Earlier quoted context omitted.

Late update: I asked on twitter, got an answer: https://news.ycombinator.com/item?id=17115334 Subscriptions will only support cloud sync, not local.

Sorry for the confusion. This is simply incorrect and I need to hunt down who is saying otherwise and get this fixed on our end. If you have a subscription you can create standalone vaults outside of your subscription and sync those using iCloud, Dropbox or WLAN sync if you wish. This behaves the same in version 7 as it did in version 6. Kyle AgileBits

Post by roustem » Mon, May 21, 2018, 3:57 PM UTC

ken wrote: post #97

akerl_ wrote: post #42

Earlier quoted context omitted.

It's worth noting (and not super obvious because of their marketing) that "getting a subscription" and "using their cloud sync" are not a mutual requirement. You can pay via subscription and continue using local/Dropbox/etc vaults. This part was super confusing to me until I dug deeper when a friend upgraded. So the primary impact of switching from standalone license to subscription, if you're planning on using 1Pass…

I've used 1Pw local sync for years, and it's very finicky. When I've contacted support, they only offered suggestions like "restart the app", or "upgrade to the latest version" (even though there's nothing in the changelog which seems possibly relevant). Some days I'll add two new passwords, sync to my other Mac (multiple times, even), and only one of them is transferred. The move to their own "cloud" as the primary…

Post by bwoodruff » Mon, May 21, 2018, 3:58 PM UTC

tzs wrote: post #119

akerl_ wrote: post #42

Earlier quoted context omitted.

It's worth noting (and not super obvious because of their marketing) that "getting a subscription" and "using their cloud sync" are not a mutual requirement. You can pay via subscription and continue using local/Dropbox/etc vaults. This part was super confusing to me until I dug deeper when a friend upgraded. So the primary impact of switching from standalone license to subscription, if you're planning on using 1Pass…

> So the primary impact of switching from standalone license to subscription, if you're planning on using 1Password for a while, is that instead of paying a larger chunk of money every so often when they drop a new major version, you move to paying a flat couple bucks a month or larger chunk per year. One thing that is not clear to me is what happens with the subscription license if you go a long time without interne…

Post by bwoodruff » Mon, May 21, 2018, 4:03 PM UTC

Groxx wrote: post #323

roustem wrote: post #266

Earlier quoted context omitted.

Implementing things is not the hardest part. Supporting customers is the hardest part. Things will break and with manual syncing support is going to be a nightmare. Also, syncing is never easy.

My point is that it doesn't need to sync . Ignore syncing. I'd even prefer to download and upload the backups by hand, rather than put it all in someone else's control in a browser environment. Cloud password systems are like running all your security-sensitive code in an Electron app - an impossibly large attack surface with many significant flaws in some of your most-sensitive use. It doesn't make sense if you care…

Post by roustem » Mon, May 21, 2018, 4:07 PM UTC

Barrin92 wrote: post #307

roustem wrote: post #270

Earlier quoted context omitted.

Better security and better user experience to start with. Unlike most of competing products, 1Password encrypts pretty much all information, including vault names, item titles, URLs, tags. It is easier to list what's not encrypted. It is also probably the only product using SRP. Now check out what information is sent in plaintext or base64-encoded in other products.

As far as I am aware lastpass and keeper are the only two password managers to receive soc II security reports. Also I'm pretty confident the entire lastpass vault is encrypted locally as well.