Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple passwords deserve an app

cabel.com

Post reply on HN
Print view View original

121–130 of 414 posts

Re: Apple passwords deserve an app

#121

Post by sabin1001 »

azinman2 wrote: post #98
AdamGibbins wrote: post #84

Edit: Removed initial comment, confused my iOS faults. Keychain its current configuration is risky, given its coupled to your iPhone password which many people frequently enter in a public setting. One shoulder surf followed by a phone theft and they've unlocked everything - including your iCloud account (which you can change the password on using iPhone password only).

If I go to system settings > password on iOS, it then requires Face ID to get in. So I’m not sure what you’re talking about. Under Face ID & passcode you can also require Face ID for a password auto fill. So I don’t think any of this is correct.

[dead]

Re: Apple passwords deserve an app

#123

Post by baby »

hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

I use chrome to manage passwords on all my devices, it works well except for apps. When I'm trying to get a password for an app in iOS, I just switch to chrome to get the password. Same if my password was from registering from an app and I'm in Chrome. Rinse and repeat and now my passwords are in both password managers.

As for TOTP, if I lose my phone I don't know what will happen.

Re: Apple passwords deserve an app

#124

Post by mattmcknight »

azinman2 wrote: post #89
rootusrootus wrote: post #71

Earlier quoted context omitted.

No, Google has not implemented support for Keychain in Chrome. AFAIK neither has Firefox.

And this annoys me greatly. I want cookies, bookmarks, and passwords to be owned by the system. That way I can switch between browsers with ease, and that would also lower the bar for new browsers to come out.

I switch between systems more than I switch between browsers.

Re: Apple passwords deserve an app

#125

Post by CharlesW »

DantesKite wrote: post #51

I get the impression Apple doesn't want a dedicated app for passwords because they don't want people to think about passwords. It shouldn't be something people manage, hassle, or worry over. They likely want people to just be able to open their phones and have it uniquely identify them seamlessly across a variety of sites. Unfortunately, they're not quite there yet.

> I get the impression Apple doesn't want a dedicated app for passwords because they don't want people to think about passwords.

I think you're right. Ventura's Passwords Settings shows that they're in transition away from the archaic Keychain app to something. My guess is that they're skating to where the puck will be in 2025 when Passkeys are universally supported, and for most use cases auth will be automatic.

Re: Apple passwords deserve an app

#126

Post by matt-attack »

dwaite wrote: post #80
isoprophlex wrote: post #3

What the actual flying fuck, the apple password thing supports TOTP! That's great! (And a sad testament to how poorly the discoverability is on some ios features)

Not just that, they will detect QR code images to work around sites which assume that TOTP is only available by scanning your desktop screen from your phone.

Can you provide an example website that uses this technology? Not sure I've ever encountered one.

Re: Apple passwords deserve an app

#128

Post by darzu »

hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

My biggest complaint is that it doesn’t keep a history! One misclicked “remember password” at the wrong moment (safari plugin often guesses password fields wrong) and you’ve just locked yourself out of your bank account. Literally happened to me.

Re: Apple passwords deserve an app

#129

Post by manigandham »

baby wrote: post #123
hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

I use chrome to manage passwords on all my devices, it works well except for apps. When I'm trying to get a password for an app in iOS, I just switch to chrome to get the password. Same if my password was from registering from an app and I'm in Chrome. Rinse and repeat and now my passwords are in both password managers. As for TOTP, if I lose my phone I don't know what will happen.

Settings > Passwords > Password Options > AutoFill Passwords + Allow Filling From Chrome

Most apps can use passwords from Chrome just fine, and you can also quickly open the native passwords window when encountering a password field using the key icon.

For TOTP, use apps like Authy which can be installed and used from multiple devices.

Re: Apple passwords deserve an app

#130

Post by danudey »

toxik wrote: post #105
azinman2 wrote: post #89

Earlier quoted context omitted.

And this annoys me greatly. I want cookies, bookmarks, and passwords to be owned by the system. That way I can switch between browsers with ease, and that would also lower the bar for new browsers to come out.

I absolutely do not want this.

Agreed. This sounds like a nice user-friendly feature until you realize what a colossal privacy disaster this would be for any malicious app that the user grants these permissions to.

"DerpCo Derpolizer would like to access your stored cookies. This allows us to automatically log into your DerpCo account!" and then bam, they hoover up your login data in an instant and send it off as part of their telemetry.

Much better to have a system like (for example) sign in with Apple where you can easily click a button to have the system authenticate you, but no one gets access to anything without specifically asking for it.

Post reply on HN