Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password Secrets Automation

blog.1password.com

Post reply on HN
Print view View original

61–70 of 186 posts

Re: 1Password Secrets Automation

#61

Post by madjam002 »

Dowwie wrote: post #60

Is anyone familiar with the secure introduction workflow using Hashicorp Vault? An orchestrator gets no more than a one-time use "cubbyhole" introduction token for a service that it is initializing. The initializing service uses the intro token to get actual credentials and secrets from the Vault. The orchestrator never touches any secrets: no secrets need to be passed as env variables anymore. With this setup, the p…

Is this the same as seal wrapping that you are referring to? Honestly Vault is one of the best pieces of software that I have the joy of using, I use it on many projects small to large.

Re: 1Password Secrets Automation

#62

Post by roustem »

CodeIsTheEnd wrote: post #43
microdrum wrote: post #4

Hah. With the gimmicks, tricks, and dark patterns this company has pulled with consumer, what are the chances professionals would trust them with something like this?

To respond to some of the sibling comments: 1Password originally operated on a licensing model, but has since switched to a membership model. It is still possible to purchase a single license, but they make it very difficult to do so. The option of a standalone license is not mentioned anywhere on their pricing page: https://1password.com/sign-up/ As I understand it, only once you have downloaded the app and are logg…

Thank you for your comment, @CodeIsTheEnd!

We always built 1Password for ourselves. It is so much easier to develop a product that you use yourself every day.

I haven't used the standalone version of 1Password for over 5 years now. The same is true for pretty much everyone working at 1Password.

Why? Because the service is much much better and more than just simple syncing of data:

- Account recovery for family and business team members

- Easy sharing of passwords and documents

- Vault permissions

- Item history/automatic backups

- Free family accounts for businesses

- Travel mode

None of these features are possible without a server doing its part.

Roustem Founder of 1Password

Re: 1Password Secrets Automation

#63

Post by bombcar »

ssully wrote: post #39
bombcar wrote: post #33

Earlier quoted context omitted.

It's exactly this - the original switch to SaaS was a high price to pay for basically what you already had if you had local sync/dropbox setup. They finally fixed many of the objections with the "family" SaaS subscription and it just works and the price may be "low enough" that I don't bother figuring out a way out of it - but it is still pretty much the perfect example of "locked in".

What do you mean by locked in? When I think of locked in, I imagine it being hard to cancel and move to another service. I switched to 1Password last year from LastPass and the first thing I checked was the process for exporting my data. It seemed on par with LassPass, which was very simple, so I made the switch.

That's the locked in - they have all your passwords and (in theory) could make a change that makes it hard to extract.

Re: 1Password Secrets Automation

#64

Post by drcongo »

CodeIsTheEnd wrote: post #43
microdrum wrote: post #4

Hah. With the gimmicks, tricks, and dark patterns this company has pulled with consumer, what are the chances professionals would trust them with something like this?

To respond to some of the sibling comments: 1Password originally operated on a licensing model, but has since switched to a membership model. It is still possible to purchase a single license, but they make it very difficult to do so. The option of a standalone license is not mentioned anywhere on their pricing page: https://1password.com/sign-up/ As I understand it, only once you have downloaded the app and are logg…

I mentioned in my sibling comment about Dropbox sync being hampered - since installing 1Password 7 my Dropbox synced vaults never sync without me explicitly opening the app settings and looking at the "Sync" option. It's like Schrödinger's sync. My primary vault now syncs over iCloud and is _much_ more reliable, but we use the Dropbox sync for work.

Re: 1Password Secrets Automation

#65

Post by SirensOfTitan »

bredren wrote: post #27

Strange to see this. The product is a mess on MacOs right now. Support can’t decide which extension to recommend. Their messaging has been inconsistent, saying the browser will integrate with the native client. But then also that the browser only version is the future of the product. This says nothing of the performance and UI problems the product has faced. Recently it was so bad the company was telling people to us…

If I were unfamiliar with 1Password, I'd imagine the product is an absolute dumpster fire from your post.

In reality, the macOS and iOS clients work fine. I have a dozen friends and family members using the product with no complains on those platforms. I surely haven't seen any performance or UI problems that aren't worse on different services. Sure, there is some current confusion between the use of the 1Password X and classical browser extensions, but it's hardly "a mess."

Re: 1Password Secrets Automation

#66

Post by npunt »

ruph123 wrote: post #36
dastx wrote: post #19

Earlier quoted context omitted.

I'm assuming he's referring to their beginnings of being a mostly local password manager (iirc they also had a one-off lifetime purchase), to forcing people to migrate to their cloud only infrastructure with a relatively high subscription price. I'd never heard of 1Password before they were fully SaaS, but as I understand it, some of the original users were pretty upset with this move. Either way, I used to be a 1Pas…

I used 1Password for a long time. When they shifted to the SaaS model I left angrily. Over time I tried out several other programs such as Enpass (came close to the original 1pw), keepass varieties, Bitwarden but found myself back at 1Password this year. One big thing, which funny enough is another dark pattern I guess, is the family account feature. I allows me to take family members on and we can share certain pass…

A new feature that adds value is not a 'dark pattern'. Lets not be dramatic.

Even moving from one-time to subscription isn't a 'dark pattern', its a business model move to shift to recurring revenue, which we know is something that businesses need to keep the lights on. You can debate the merits of it, but it's not a dark pattern in and of itself. HOW they execute that might be, but the change itself isn't. You just have a personal preference to not want to pay for it in a particular way.

Re: 1Password Secrets Automation

#67

Post by fiddlerwoaroof »

rectang wrote: post #48
xoa wrote: post #24

While this looks interesting, I'll admit I feel like there's been a bit of drift from their bread and butter over the years since they launched their cloud thing and started pushing hard towards a subscription model. I chose them long ago specifically over options like LastPass because I liked having a rich application without internet dependency and their attention to detail and features there, but it's been a while…

> I specifically want my non-technical family and friends to use password managers I consider it a victory if I can get non-techies to use their browser's facilities to store passwords, and then to choose reasonably long passwords and avoid reuse. (I use `pass`, myself.)

I use a password manager but, as a mostly-Apple user, I see very little reason not to just use iCloud Keychain: the UX of Apple’s solution is significantly better than all the alternatives because I don’t have to remember yet another password/mfa token to type in every once in a while.

Re: 1Password Secrets Automation

#68

Post by Dowwie »

madjam002 wrote: post #61
Dowwie wrote: post #60

Is anyone familiar with the secure introduction workflow using Hashicorp Vault? An orchestrator gets no more than a one-time use "cubbyhole" introduction token for a service that it is initializing. The initializing service uses the intro token to get actual credentials and secrets from the Vault. The orchestrator never touches any secrets: no secrets need to be passed as env variables anymore. With this setup, the p…

Is this the same as seal wrapping that you are referring to? Honestly Vault is one of the best pieces of software that I have the joy of using, I use it on many projects small to large.

Yes, precisely. Wrapped tokens and cubbyholes. Vault is great. They put a ton of effort into it.

Re: 1Password Secrets Automation

#69

Post by Vvector »

fiddlerwoaroof wrote: post #67
rectang wrote: post #48

Earlier quoted context omitted.

> I specifically want my non-technical family and friends to use password managers I consider it a victory if I can get non-techies to use their browser's facilities to store passwords, and then to choose reasonably long passwords and avoid reuse. (I use `pass`, myself.)

I use a password manager but, as a mostly-Apple user, I see very little reason not to just use iCloud Keychain: the UX of Apple’s solution is significantly better than all the alternatives because I don’t have to remember yet another password/mfa token to type in every once in a while.

BitWarden ties into iCloud somehow. I unlock it with my fingerprint.

Re: 1Password Secrets Automation

#70

Post by danenania »

whycombagator wrote: post #28
drcongo wrote: post #18

Earlier quoted context omitted.

We use EnvKey [0], it's far friendlier to use than Vault and very mature. My only dislike is the Electron based app, but I so rarely have to open it that I can live with it. https://www.envkey.com

Still no option to self host. The founder of Envkey claimed they were working hard on V2 and self hosting 1.5 years ago[0] so it’s anyone’s guess as to why that’s been delayed/isn’t happening. [0] https://news.ycombinator.com/item?id=21226715

Hi, I can assure you that it’s very much still in the works! It’s taken much longer than we wanted or anticipated, as we’re addressing a lot more than just self-hosting (though that’s an important piece). But we’re on the home stretch. Stay tuned.
Post reply on HN