Live data from Hacker News

1Password for Linux

blog.1password.com

161–170 of 282 posts

Re: 1Password for Linux

#161

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we s…

> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux.

I have my keepass vault in my dotfiles repository. All i need on any device is keepass and if i want to write to that vault, git. Of course i secured my publically accessible vault with a strong password and an additional token. Works fine for me but i have to admit, using a lot of devices with write access to that vault would get cumbersome.

Re: 1Password for Linux

#162
post #95
post #27

I just use pass: https://www.passwordstore.org/

No, but in all seriousness, I emphatically DO NOT UNDERSTAND the extent to which people place trust in external services to manage passwords. While I appreciate that they do have good skin in the game by being paid, etc -- your password storage on SOMEONE ELSE'S MACHINE fundamentally creates another huge attack vector/opportunity to screw it up, when they also must be accessed locally somehow. I appreciate it if you'…

Exactly. I have an open source password manager on my Linux laptop and the data files are backed up weekly to 2 different locations (along with other valuable information). Granted, I have little need for password management on the phone, but even if I did, why would I trust someone to keep track of my credentials? I just don't get it why so many people seem to be ok with this...

Re: 1Password for Linux

#163
post #93
post #24

Earlier quoted context omitted.

I'm just surprised people call Electron apps "native" now.

"Native" doesn't mean anything. Everything is native; I mean, at some point, its making syscalls and running bytecode on the processor, its not running in a Virtual Machine, that seems pretty "native". Or, nothing is native; it runs through an interpreter, or fifty thousand layers of UI library abstraction, or whatever. Websites definitely aren't native, right, electron... isn't... Windows WPF apps, classic native, j…

What is a fast Electron app? Visual Studio Code is praised the most by far. And even it's slow compared to alternatives like Sublime Text.

Native is short for native code or native UI depending on context. Native code means AOT compiled. Native UI means it uses one of the platform's conventional UI frameworks. You can have native UI without native code.

Classic Windows apps are great compared to most alternatives.

Re: 1Password for Linux

#164
1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible?

Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me.

[0] https://1password.com/sign-up/

Re: 1Password for Linux

#165

I have always wondered why we can’t make visible the master password when typing it. My master is very long (pass phrase) and I have to type it very carefully, it’s even harder on mobile. Such a pain ! Isn’t it a basic UX pattern to allow the user to show/hide the password as type it (with the popular eye icon at the end of the password input) ? Am I missing something ? Is this not present for security reason ?

It is a protection from "shoulder-surfing". I agree with you, there has to be an option to reveal the password if needed.

Re: 1Password for Linux

#166

1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible? Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me.…

The apps become read only. I don't know if you can access the web version.

Re: 1Password for Linux

#167

1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible? Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me.…

You still get read-only access. Where you can no longer add or edit your entries.

Re: 1Password for Linux

#168
The problem I see is that their Linux Keying integration is as far as I can tell done in a way it's not supposed to be used by anything and as such they need to ship with a SUID binary helper, basically a (hopefully) harmless root backdoor.

(And I'm not speaking about the chrome/electrone sandbox, which can be run without SUID on modern systems).

Re: 1Password for Linux

#169

1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible? Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me.…

Your data is yours. Even if you cancel your subscription and your account is frozen[0], you can still sign in to 1Password.com or in the apps to view and export your data.

[0] https://support.1password.com/frozen-account/

Re: 1Password for Linux

#170
post #169

1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible? Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me.…

Your data is yours. Even if you cancel your subscription and your account is frozen[0], you can still sign in to 1Password.com or in the apps to view and export your data. [0] https://support.1password.com/frozen-account/

Thanks for this ;)
Post reply on HN