Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Apple passwords deserve an app

cabel.com

Post reply on HN
Print view View original

381–390 of 414 posts

Re: Apple passwords deserve an app

#381

Post by withinboredom »

stouset wrote: post #179
rootusrootus wrote: post #66

Earlier quoted context omitted.

I hope not. I'm patiently waiting on 1Password to release their implementation of passkeys so I can have it work on all my devices, Apple or not.

Just use Passkeys. Any account that allows 2FA allows multiple second factors. You should be setting up backup second factors anyway if you don't want to risk getting permanently locked out of all of your accounts. Plus, putting second factors in the same location as your first factor (e.g., 1Password) seems to pretty much defeat the entire purpose of having a second factor. If you're using strong passwords with 1Pas…

passkeys isn't supported on linux desktop, at all. and if you know how to make it work, please let me know. I have to switch to a Windows machine to login with them.

Re: Apple passwords deserve an app

#382

Post by rpgbr »

tokamak-teapot wrote: post #355
lxgr wrote: post #220

Earlier quoted context omitted.

The attack in this case would be somebody shoulder-surfing your PIN and grabbing your device. They then have everything they need to take over your iCloud account (kicking you out of it in the process by resetting all other devices capable of resetting it) and can see all your passwords stored in it, as well as use all of your WebAuthN passkeys. I'm not sure if having a recovery code would improve that situation, but…

I saw advice here a while back about using Screen Time to block PIN and Account updates. This gives you a separate PIN to protect those, so theoretically if someone shoulder surfs your phone PIN they can’t take over your iCloud account.

I use this trick. It's an added layer of security, although a weak one — Screen Time PIN is four digit-mandatory — and a workaround — as in: not made for security purposes.

Re: Apple passwords deserve an app

#384

Post by vanilla_nut »

someNameIG wrote: post #111
vanilla_nut wrote: post #73

Earlier quoted context omitted.

I believe Apple only lets you use certain APIs (like Keychain) if you distribute only through the App Store. That policy has really killed a lot of functionality on macOS. I suspect it will cause fiction on iOS when the EU forces them to allow alternative install sources. Personally, it grates me when Apple cripples functionality this way to try to keep us stuck in their platform. Can't use Firefox with Keychain. You…

Is there a reason Chrome, Edge, and Firefox aren't on the Mac app store? I know the yearly dev account costs can be an issue for small developers but Google, Microsoft, and Mozilla are already paying that as they release apps on the iOS App Store.

I assume it's annoying to jump through hoops and code review for every release.

Most macOS users don't use the app store. So directing folks there can be annoying for users, or even cause problems if they aren't signed into iCloud.

They'd likely end up with either an old version on the app store at all times, or with a massive, unpredictable day-or-week-long delay waiting for Apple's reviews before every release. Small wonder they don't bother.

Re: Apple passwords deserve an app

#387

Post by efdee »

great_psy wrote: post #113
imwithstoopid wrote: post #41

Earlier quoted context omitted.

don't lose or break your phone....

I have my old iPhone with no sim that I mostly take to the gym to protect the new one.

How do you access your passwords on your new iPhone from your old iPhone?

Oh, they're stored online? There goes your entire "secure enclave" argument ;-)

Re: Apple passwords deserve an app

#388

Post by andrewmutz »

AdamN wrote: post #364
hnrodey wrote: post #4

I tried going all-in on using iCloud Keychain (correct term?) for my passwords from having previously used LastPass. In short. 1. The experience on Windows is terrible. They can claim it's cross-platform but it's truly a sub-par product. 2. On Mac it's tied specifically to Safari. I use Safari a lot but if I'm in a different browser then my passwords are unavailable. 3. The GUI is buried in System Settings. Heaven fo…

Serious question but what do you use Windows for? I don't know alot of people that use Windows anymore so just wondering is it a work requirement?

It's still widely used for gaming

Re: Apple passwords deserve an app

#389

Post by airstrike »

shagie wrote: post #181
airstrike wrote: post #147

Earlier quoted context omitted.

Still, none of that means anything to the average user. Searching for "passwords" in Spotlight should also take you to your passwords

Make an alias to Keychain access. Name it "Passwords" and have that a directory that is indexed by Spotlight (the Utilities directory under Applications where Keychain Access is found works fine). This will then show up in the launchpad. https://i.imgur.com/IRPOMC5.png Searching for 'pass' in Spotlight does bring up Keychain access - as that's in the apps list of Keywords... however the list of apps is way down on th…

> Make an alias to Keychain access.

Sorry, but that also doesn't mean anything to the average user. If anything it's made it more complicated for them—they will remember to type in "key" before they learn how to make an alias

That I don't have an issue with the word "keychain" doesn't mean it's not bad UX for the average Mac OS user

Re: Apple passwords deserve an app

#390

Post by tasuki »

error503 wrote: post #163
geocar wrote: post #102

Earlier quoted context omitted.

> Even if you swear undying fealty to Apple (or anyone else) today, you might change your mind in the future. Changing my mind is easy enough: I can export my iCloud passwords to a csv file, and I've done this to transfer a bunch of passwords to Firefox Linux desktop. I'll tell you something though: If Bitwarden leaked passwords nothing would happen because America has very weak consumer protections, but if Google or…

Self-host vaultwarden at the cloud provider of your choice?

What is the point of this? Isn't it easier/simpler/better to just sync a file with the passwords rather than keep a server running?
Post reply on HN