Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1password is considering a self-hosted option to store vaults

1password.community

Post reply on HN
Print view View original

81–90 of 228 posts

Re: 1password is considering a self-hosted option to store vaults

#81

Post by j1elo »

bruckie wrote: post #78
j1elo wrote: post #62

Earlier quoted context omitted.

I'm paying for a Bitwarden subscription because I want to support their product and their vision. But I don't know, time passes and some much needed improvements don't seem to arrive. The most glaring issue (for me, anyway; I fully understand I'm just a sample size of 1!) they have is relying on the pop-up UI of the browser, which I guess is stateless (state is lost when the popup closes, it seems?). The decision of…

Tavis Ormandy (of Google Project Zero) has a pretty convincing post arguing that relying on browser extensions that modify the DOM (which includes [almost?] all password managers) is a bad idea: https://lock.cmpxchg8b.com/passmgrs.html (he recommends using your browser's built-in password manager, which isn't as convenient but is much more secure)

I guess it makes sense, but it's a very very unhelpful suggestion... we're painfully and slowly moving in the direction of teaching users how passwords are less and less useful as long as they are not random, so the ideal alternative is having all random passwords and using a vault that remembers them for us.

But this whole proposition totally breaks if I store my Amazon password in Chrome at work, and then later I cannot access it in Firefox at home, or the native app in my Android phone.

Re: 1password is considering a self-hosted option to store vaults

#82

Post by mlindner »

geerlingguy wrote: post #49
cosmolev wrote: post #25

I am still on 1Password 6 because it is the last version with the self-hosted vault.

I'm on 1Password 7 and am syncing my local vault through Dropbox. I don't pay any subscription...

Please let us know how you did this. I'm stuck on 6 because I didn't want to pay a subscription.

Re: 1password is considering a self-hosted option to store vaults

#83

Post by Terretta »

AnonC wrote: post #13

They made the standalone license almost impossible to find and get, forced a subscription on users, and made the password vault storage online for the subscriptions. Now this self-hosting survey comes as a surprise, and it would be of some relief if/when it’s implemented. I do wonder how the licensing and pricing will be handled though. Bitwarden officially allows self-hosting for the personal use tiers, but it seems…

> Is there any password management application out there that makes sharing passwords or password vaults easy but is also free?

For members of a relatively well-paid profession earning good wages from creating software, I wonder if the reluctance to support others earning money for quality work isn’t some form of cognitive dissonance.

// Pre-emptive “edit” before this comment has replies: Folks post a lot of arguments for “free” software any time there’s a comment such as mine — but justifications largely feel like post-hoc rationalizations conflating freedom of information and ideas with freedom from paying for value, ret-con’d stories we tell ourselves. I call BS — unless one is independently wealthy, to spend maker time on art or craft requires one to either earn money or enjoy patronage. Tools for work are more craft than art, and deserve to earn, especially as patronage or maker communes are in short supply. Not to mention the exercise of ethnocentric privilege implicit in demanding something of quality in exchange for nothing assured.

Re: 1password is considering a self-hosted option to store vaults

#84

Post by ronnier »

bruckie wrote: post #78
j1elo wrote: post #62

Earlier quoted context omitted.

I'm paying for a Bitwarden subscription because I want to support their product and their vision. But I don't know, time passes and some much needed improvements don't seem to arrive. The most glaring issue (for me, anyway; I fully understand I'm just a sample size of 1!) they have is relying on the pop-up UI of the browser, which I guess is stateless (state is lost when the popup closes, it seems?). The decision of…

Tavis Ormandy (of Google Project Zero) has a pretty convincing post arguing that relying on browser extensions that modify the DOM (which includes [almost?] all password managers) is a bad idea: https://lock.cmpxchg8b.com/passmgrs.html (he recommends using your browser's built-in password manager, which isn't as convenient but is much more secure)

I only open the webui, log in, copy paste my usernames and passwords. I don't trust that my passwords are safe otherwise.

Re: 1password is considering a self-hosted option to store vaults

#85

Post by addicted »

j1elo wrote: post #62
fy20 wrote: post #28

Earlier quoted context omitted.

I do this, works perfectly for sharing common passwords among my family (streaming services and utilities mainly). I moved from 1Password, and my main gripe with Bitwarden are the apps aren't as polished. If it's not too expensive I'd consider switching back (1Password family is $60 per year, so I assume this will be less).

I'm paying for a Bitwarden subscription because I want to support their product and their vision. But I don't know, time passes and some much needed improvements don't seem to arrive. The most glaring issue (for me, anyway; I fully understand I'm just a sample size of 1!) they have is relying on the pop-up UI of the browser, which I guess is stateless (state is lost when the popup closes, it seems?). The decision of…

I use Bitwarden in the Firefox sidebar. That provides a persistent state experience.

Re: 1password is considering a self-hosted option to store vaults

#86

Post by jeromegv »

aikinai wrote: post #36
microtonal wrote: post #5

Semi-related: this survey was announced alongside 1Password 8 for Windows early access. Apparently 1Password 8 for Windows uses Electron and there was some discussion about AgileBits wanting to move to the same architecture on all platforms. Does anyone know if 1Password 8 on macOS will also be an Electron app? Their Linux Electron app is pretty good and definitely much better than having no 1Password at all. However…

Thanks for the warning about this. I was already disappointed in the direction 1Password has been taking, and moving to Electron would certainly be the last straw. It’s totally reasonable that they want to cheap out on the actual software and expand their business into more lucrative services, but it’s not what I personally want in a password manager. So hopefully someone else, maybe a lone develop that doesn’t need…

Looks like you’re looking for a reason but none of that was announced or even hinted as happening on macOS. They have one of the best Mac native app, I doubt it’s part of their plan.

Re: 1password is considering a self-hosted option to store vaults

#87

Post by jeromegv »

DavideNL wrote: post #74

I wonder whether they are considering this because people are leaving 1Password for Bitwarden, which has a self-hosted option… Personally i would never pay for a 1Password subscription. I did buy all the standalone versions/upgrades, since day1.

There might be some anecdata on hacker news but 1Password user base has been constantly growing.

Re: 1password is considering a self-hosted option to store vaults

#88

Post by Ecstatify »

CrimsonRain wrote: post #35
AnonC wrote: post #13

They made the standalone license almost impossible to find and get, forced a subscription on users, and made the password vault storage online for the subscriptions. Now this self-hosting survey comes as a surprise, and it would be of some relief if/when it’s implemented. I do wonder how the licensing and pricing will be handled though. Bitwarden officially allows self-hosting for the personal use tiers, but it seems…

Enpass works nicely. I can freely share vaults and keep vaults backed up in anyway I prefer. Two downsides: 1. Mobile is paid I think 2. Not open source

Personally I don't recommend Enpass. They switched to a subscription model like every other password manager. They don't host your data so have no recurring expense, I don't understand how they can justify the subscription model. They have no real innovation, they added an "Audit Feature" for an additional €26.49 per year.

Re: 1password is considering a self-hosted option to store vaults

#89

Post by j1elo »

addicted wrote: post #85
j1elo wrote: post #62

Earlier quoted context omitted.

I'm paying for a Bitwarden subscription because I want to support their product and their vision. But I don't know, time passes and some much needed improvements don't seem to arrive. The most glaring issue (for me, anyway; I fully understand I'm just a sample size of 1!) they have is relying on the pop-up UI of the browser, which I guess is stateless (state is lost when the popup closes, it seems?). The decision of…

I use Bitwarden in the Firefox sidebar. That provides a persistent state experience.

Good idea! I'm however limited here by the fact that (Firefox at least) only one sidebar can be open at the same time. And for me that's occupied full-time by the fantastic Tree Style Tab extension. I would definitely find it useful if more sidebars could be open at the same time.

Re: 1password is considering a self-hosted option to store vaults

#90

Post by devy »

notafraudster wrote: post #64

I used 1password for about ten years. Every interaction I had with the developers was pretty hostile. Even if they encouraged self-hosting and version-based upgrading instead of a SaaS, I'd still stick with a competitor. At this point I'm irrationally bothered by the fact that it's a 100+ staff company just to make a product that's no better than it was when they had 10 staff and is now more expensive.

What are the good competitors you recommend? Dashlane?
Post reply on HN