211–220 of 282 posts
Earlier quoted context omitted.
I agree on supporting your vendor, however, I think 1Password is too expensive. That is why I pay for Bitwarden. The difference is 33% less expensive (or 50% more expensive if you look it from the Bitwarden side). I think 3.33 euros per months is about a good valance.
An individual 1Password membership is €2.65+VAT per month when invoiced annually. - Ben, 1Password
Earlier quoted context omitted.
I started using 1Password a long time ago (~10 years) when the only option was the standalone license option. It is a lifetime license for about the cost of ~2 years of subscription. They still sell and "support" this standalone product. But I use the word "support" in quotes because the standalone license doesn't offer all the features of the subscription product. I resisted switching to the subscription product for…
Lifetime licenses rarely last a lifetime. Most products will run out of support long before you run out of life. You'd be lucky if the company even existed after 10 years. Before subscription software became all the rage, you had to purchase a license for a specific version. You had the right to keep using the version you purchased for as long as it worked, but if you wanted any new features, you had to shell out mon…
I just use pass: https://www.passwordstore.org/
No, but in all seriousness, I emphatically DO NOT UNDERSTAND the extent to which people place trust in external services to manage passwords. While I appreciate that they do have good skin in the game by being paid, etc -- your password storage on SOMEONE ELSE'S MACHINE fundamentally creates another huge attack vector/opportunity to screw it up, when they also must be accessed locally somehow. I appreciate it if you'…
At some point the paranoia isn't productive anymore.
What's the password recovery process like with 1Password for family accounts? I'm the administrator for my family's account on LastPass and my wife forgot her master password and has now burned the associated email. The account was unused and empty so nothing was lost but it highlighted to me that account recovery was not smooth or seamless. As an administrator you can't just issue a password reset on their behalf. I…
If it were possible to recover lost passwords as in your wife's case, then I absolutely would not trust the service at all. If you forget your master password, the passwords contained must be unrecoverable at that point. If they aren't, then that means the server/service has access to your plaintext passwords, and that is (or at least should be) an unacceptable security risk.
The only secret the server ever sees is the secret (device) ID, and that’s by design.
Earlier quoted context omitted.
Like OP, I’ve used 1P since the early 2010s. Its approachability (and the fact that I pay for it) finally convinced my family (SO/siblings/parents) to use a password manager. I love the native experience on iOS, and the full desktop version + browser extensions I remember being frustrated by the Dropbox loss, and I’m still frustrated that they seem to push 1PasswordX over the native apps. Other than that I’ve only ha…
I self-host using docker. It is very reliable including updates. Transition is as easy as exporting your 1P database and importing it into BW. Integration in IOS is very similar as 1P. Overall, 1P's apps are more polished than BW. You notice it when you migrate over and after a while you forget about it. There's one caveat and that is you've to pay BW $10 per year to get TOTP/2F AUTH support and offline support in th…
I hope we can win you back someday.
++dave; 1Password Founder.
Earlier quoted context omitted.
An individual 1Password membership is €2.65+VAT per month when invoiced annually. - Ben, 1Password
Bitwarden is €10 when invoiced annually (32 vs 10).
> I think 3.33 euros per months is about a good valance.
:)
Interesting: > 1Password for Linux also debuts with several features that are coming soon to 1Password for Mac, Windows, iOS, and Android That should be encouraging for Linux users. It suggests that the Linux version is not just a port that will forever at best follow the other platforms. It can get pretty annoying when you have something that is available on multiple platforms, and your platform tends to always lag…
Reads like a love letter to Linux, it's great.
++dave; 1Password Founder
Interesting: > 1Password for Linux also debuts with several features that are coming soon to 1Password for Mac, Windows, iOS, and Android That should be encouraging for Linux users. It suggests that the Linux version is not just a port that will forever at best follow the other platforms. It can get pretty annoying when you have something that is available on multiple platforms, and your platform tends to always lag…
Yup! In many ways Linux is leading the charge. Not just with these features but also for development as a whole. Here's the background story on how 1Password for Linux started and how it was built: https://dteare.medium.com/behind-the-scenes-of-1password-for... ++dave; 1Password Founder
Have you looked into using Sciter instead of Electron? It seems to be considerably more lightweight.
The problem I see is that their Linux Keying integration is as far as I can tell done in a way it's not supposed to be used by anything and as such they need to ship with a SUID binary helper, basically a (hopefully) harmless root backdoor. (And I'm not speaking about the chrome/electrone sandbox, which can be run without SUID on modern systems).
1Password puts in effort where possible to defend against attacks on your local system, so we need the keys currently used as part of the kernel keyring integration to be inaccessible to anything in userspace or otherwise some malware could steal credentials going back/forth to the browser.
The SUID binary helper is unfortunate, but you can blame Linux for that. Our integration makes extensive use of the KEYCTL_CHOWN and KEYCTL_SETPERM syscalls for the reasons stated above, but a process needs the `CAP_SYS_ADMIN` capability to call them (ctrl+f on the man page for capabilities). In the end, we decided that making it SUID was more transparent to users then giving it that capability on install since the former is more visible.
This is great. Is there any hope of having the possibility to export entries? Looks like it's missing compared to Windows and Mac.
File > Export is your friend.
++dave; 1Password Founder