241–250 of 352 posts
Earlier quoted context omitted.
More likely it is the overhead of multiplatform support that motivates them to use Electron. Their support matrix is pretty big now: iOS, Android, Web, Mac, Windows, browser extensions, Chrome OS, and Linux
That would only make sense if they use Electron besides Linux.
Unrelated to the heading of this post, but looking at the screenshot it seems that it supports OTP generation within the app. Having one place that both stores your password and generates the OTP seems to defeat the purpose of 2FA no?
- Please rethink sections. Most items are better off without them, so they should be revealed only when requested, not cluttering every create and edit screen and making me sort half my fields under a “SECTION” section just to not use sections.
- Please rethink the flow for adding a new field of a non-text type. It’s just silly to have to scan down for “SECTION”, then down for “new field”, then right for “T”, then click, then scan down for the field type, then click, then click in the data box, every time I want to add a one-time password.
- Please hide unused items from the sidebar, like empty categories, “Favorites” when there are no favorites, and the vault switcher when there’s only one vault. The clutter makes it slower and harder to use.
- Please condense Watchtower into one sidebar entry. My two options right now are “don’t see Watchtower alerts” and “push the rest of the sidebar so far down I only see a few non-Watchtower items”, neither of which is good.
- Please separate “Ignore HTTPS warning for this website”, ignore 2FA warning, etc, from tags. I don’t want to pollute my tagging system with what’s essentially “items on a LAN”, “items where 1Password’s 2FA list is wrong”, etc.
- Please give me a keyboard shortcut to create a new login regardless of the currently selected category. I suggest Command-N for “New in current category”, Shift-Command-N for “New login”, and Option-Command-N for “Open new item type menu”, but would settle for anything that consistently creates a new login with one shortcut.
- Please change the popup password generator to match the 1Password Mini password generator: include 1+ numbers and symbols when checked, not a preset number, and omit symbols that are usually rejected by websites, because the small entropy gain isn’t worth the time spent manually editing passwords.
- Please revise your passphrase word list, or at least provide an alternate list. It’s hard to remember words nobody knows. (That’s the use case for passphrases, passwords that sometimes need to be spoken or remembered, for the rest I’ll use a higher entropy password.) I know using only common words would be less secure, but there’s a better balance to be struck; Bitwarden’s list is excellent.
- Please work to reduce full UI refreshes. I keep losing keystrokes to them.
- Please give me configurable URL matching rules like Bitwarden. Without them there will always be some false positive page matches that I need to arrow through every time I use that domain.
I love you guys. I’m willing to pay your price for great software. But these annoyances keep piling up and I feel that the price warrants more care.
Earlier quoted context omitted.
> The other versions are native. It's one of the things that sets 1Password apart. Is the Linux version Electron? Yes, it is very obvious from the screenshot that it’s built on top of Electron [1]. GTK nor Qt have that type of UI elements, they are obviously HTML elements stylized with CSS. Another hint is in the files contained inside the Debian package used during the Linux installation [2]: root@3cb1637b3070:/# ap…
Heh. What does the password manager use OpenGL and ffmpeg for? I guess the binary is 130MB(!) is the electron part?
I was a 1Password user from when it was fully self-hosted until they started pulling bait and switch tactics to move people to subscriptions and online vaults[1]. I also had Windows licences, and Windows was certainly a 2nd class citizen while I used 1Password. And of course, it doesn't look like the 1Password Linux client is open source. The back-end certainly isn't. I switched to Keepass[2] initially, synchronised…
I dont think i will go back to 1Password.
I was a 1Password user from when it was fully self-hosted until they started pulling bait and switch tactics to move people to subscriptions and online vaults[1]. I also had Windows licences, and Windows was certainly a 2nd class citizen while I used 1Password. And of course, it doesn't look like the 1Password Linux client is open source. The back-end certainly isn't. I switched to Keepass[2] initially, synchronised…
I'm also a big fan of Bitwarden. Have tested 1Password, LastPass and a few of the other password managers over the last 5 years. This is the one that ticks all the boxes, has the least bloat, does correct matching. I support it with pleasure!
The fact that it is Open Source code that has been professionally audited also gives me an extra level of assurance.
Earlier quoted context omitted.
I am a 1password user, and have bene for about the same amount of time, but I've been slowly looking for an alternative. Unless I'm mistaken, 1Password no longer ephemerally decrypts passwords as needed and only while used and then scrubs the memory. [1, old but still] The excuse, if I remember it, was that garbage collected languages made this challenging. Even so, there is some irony in them moving away from the te…
> The excuse, if I remember it, was that garbage collected languages made this challenging This is one of the main reasons why the core of 1password was rewritten in Rust: https://support.1password.com/kb/201902a/
Earlier quoted context omitted.
... I wish I'd thought of booting into my Windows partition and installing 1password there, instead of spending an evening writing up an extremely overwrought export script on top of the commandline client.
Would you mind sharing it, so that other people don't have to go through the same pain you did? Maybe even creating an issue and dropping the code there could be helpful. Then somebody could pick it up and reuse the algorithms you wrote. That'd be pretty great.
Caveat that it doesn't emit a csv you can import elsewhere, it's not extremely polished, hasn't ever been run outside of my laptop, just does a bunch of unnecessarily clever things. Needs the 1password commandline utility `op` set up (ie you have to have told it your secret key already).
It'll create `items/` and `documents/` dirs with one file per, well, item or document, named after the uuid. It tries to make a symlink named after the metadata for each file in the hope that you'll have an ok time tabcompleting your way to the desired secret. There's some attempt to not redownload files that you already have, mostly because I re-ran this thing a million times trying to get it to work.
I wrote this to be able to zip all my secrets, `scrypt` the zip file with a strong password, and put the scrypted file on a usb drive that isn't particularly well hidden, just as another fallback/recovery option in case a meteor hits 1password HQ or my paper backups catch fire.
Earlier quoted context omitted.
1Password used to let you host self host web vaults. Dropbox and iCloud seem to work fine where they're still supported. Dropping local vaults in an iOS patch was kind of sleazy. So is downplaying the ways the new security model is worse.
If you think Dropbox or iCloud have better security than Agilebits, I have a bridge to sell you.
What are peoples thoughts about firefox lockwise? I have been using keepass for forever but I want something that easily syncs between devices and doesn't require copy/paste in to the browser. Lockwise seems perfect but I haven't used it much yet.
I've found great success with KeePass and Dropbox. I use the Kee plugin in Firefox that allows autofill in the browser, and KeePass2Android on my phone which supports pluggable autofill for browsers and apps on Android. It's not as trivial to set up as Lockwise or 1Password, but I prefer this setup because: - 100% Open Source - I own the keyring and can sync it across literally all of my machines, plus the cloud stor…
But I've been using Lockwise for years (and the previous cloud tool from Firefox, Sync, IIRC) and it mostly does the job. Sometimes I'd like to edit the entries to a finer grain or add foreign passwords (the ones that don't relate to a webpage) but that's it. Extremely easy to get running and sync.