Live data from Hacker News

Apple unveils 'Passwords' manager app at WWDC 2024

zdnet.com

461–470 of 767 posts

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#461
post #168

Here's Apple's big problem: it's not a replacement for so many alternatives because it isn't supported on all platforms. Safari? Not on Windows. Apple Music? This actually has a Windows client. I'm not sure how good it is. But Spotify supports Windows and even Linux. Apple Password Manager? Will this be tied to iCloud? Will I be able to use it on Android? If I no longer have an iPhone will it be a pain to maintain an…

>> People don't want everything tied to one identity, one service, one login. I think this is exactly what _most_ people want. With password management specifically, Apple has had a Chrome extension available for a while now which has allowed me to use it on other browsers/platforms. Not ideal, but good enough for most. On top of that, they don't lock you in with passwords. You can easily import and export your passw…

>I think this is exactly what _most_ people want.

This is what they think they want, until something happens and they are forced to move out of the walled garden, and have to replace everything.

But, admittedly, that's Apple's bread and butter, and they've managed to avoid big controversy so far...

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#462
post #233

Earlier quoted context omitted.

I used it with my family and it's worth paying monthly for it. Passwords are so incredibly important. If I was hit by a car tomorrow, I know a huge chunk of my life is there for people to just pick up.

> If I was hit by a car tomorrow, I know a huge chunk of my life is there for people to just pick up. My wife and I have talked a bit about this recently but haven't implemented anything yet. (I use 1Password, and she doesn't have access other than a shared vault, and vice-versa with iCloud passwords.) One thing that gives me a bit of hesitation is from a security standpoint - if we have access to each other's accoun…

If you're worried about banking passwords and accounts, those shouldn't be shared logins. Banks in the US have specific procedures for handling the death of account holders, and someone logging in as the deceased is problematic. Beneficiary designation and percentages needs to be followed, and if a spouse/other logs in and starts moving money around, all that has to be unwound.

My break glass implementation is a printed sheet of all my financial orgs and account numbers (including bills I handle). All the beneficiary designations are done, so my wife would just need to give them the death certificate and she'd have control of the funds.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#463

Earlier quoted context omitted.

I stopped logging in into there since they forced 2FA on me because of an old contribution to an open source project. It's too much of a pain and I don't need to be logged in to look at the code of the modules or libraries I'm using or I could use. As collateral damage, I stopped opening issues on open source projects, that was maybe two or three issues per year. All my customers are on Bitbucket at the moment and it…

It amazes me the lengths people will go to to avoid security.

It’s not that the gp is trying to avoid being secure.

It’s that for a service that you only have a need for, a few times a year, mandating 2FA is an unnecessary hassle that can lead to user frustration.

I’ve experienced the same with Gitlab. I rarely use Gitlab and don’t have anything important hosted there but when a project I was a member of enabled 2FA for all contributors, it made my Gitlab account completely frustrating to use.

Typical scenario: I’m trying to do something brief on Gitlab that requires me to be logged in so I login then get shown an interstitial page saying I cannot proceed until I enable 2FA on my Gitlab account. Every action I attempt while logged in will fail unless I either enable 2FA or remove myself from the project that enabled mandatory 2FA after I was added.

GitHub’s 2FA implementation is night and day better than Gitlab’s but I imagine the user frustration must be similar if you find yourself suddenly having to enable 2FA because a GitHub org you were already part of mandates it.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#464
post #193

Earlier quoted context omitted.

1password has progressively gotten worse every year for the past 5-10. 1password team if you are reading this, please stop making your software worse. Search which was great for years is now terrible and has jumbled results. Some software should just be considered "done" and never changed again. 1Password is one of those things.

1Password has gotten way, way better than it was a few years ago in my opinion. Tons of new features and the redesign a couple years ago was a big improvement.

> Tons of new features and the redesign

After LastPass lost it I shopped around and avoided 1Password precisely because it looks and is marketed like typical feature-oriented apps powered by VC valuations and growth metrics. I do not like trigger happy product management near critical single-purpose software. It’s already quite challenging, because pw managers need (1) offline support (2) a sync protocol that’s virtually bug free and (3) state of the art crypto/security and (4) wide cross platform support.

I prefer such an app to sit basically dormant until there’s a new industry development (like passkeys) to keep up with the times. And even then, those features should only be added thoughtfully with a defensive mindset to ensure stability going forward.

So tldr, your stated benefits are in fact the very reason a lot of people don’t like it.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#465
post #463

Earlier quoted context omitted.

It amazes me the lengths people will go to to avoid security.

It’s not that the gp is trying to avoid being secure. It’s that for a service that you only have a need for, a few times a year, mandating 2FA is an unnecessary hassle that can lead to user frustration. I’ve experienced the same with Gitlab. I rarely use Gitlab and don’t have anything important hosted there but when a project I was a member of enabled 2FA for all contributors, it made my Gitlab account completely fru…

True, but the alternative is that people with valuable projects to secure don't do that (because they aren't forced to), and lose things.

That said, the sign-in flow with a Passkey and BitWarden is great. Click "sign in with a passkey", click "confirm", done. No username, password, or 2FA required.

One day I hope BitWarden implement my suggestion of not requiring that second click if you only have one key.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#467
post #420

Earlier quoted context omitted.

Counter point - in what ways is macOS 'closed' and Windows not? And I am specifically talking about macOS, not iOS.

MacOS is only licensed for use in Apple branded hardware, as I understand it. Even running it in a VM could be problematic if that host isn't running MacOS.

So your issue isnt the openness in terms of being limited on what you can do on it, and more that you want it to be bloated with drivers for millions of various pieces of hardware like Windows, got it.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#469
post #168

Here's Apple's big problem: it's not a replacement for so many alternatives because it isn't supported on all platforms. Safari? Not on Windows. Apple Music? This actually has a Windows client. I'm not sure how good it is. But Spotify supports Windows and even Linux. Apple Password Manager? Will this be tied to iCloud? Will I be able to use it on Android? If I no longer have an iPhone will it be a pain to maintain an…

I do, because i don't have any windows or android machines

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#470
post #291
post #168

Here's Apple's big problem: it's not a replacement for so many alternatives because it isn't supported on all platforms. Safari? Not on Windows. Apple Music? This actually has a Windows client. I'm not sure how good it is. But Spotify supports Windows and even Linux. Apple Password Manager? Will this be tied to iCloud? Will I be able to use it on Android? If I no longer have an iPhone will it be a pain to maintain an…

Apple thinks "One Ring to rule them all" will work on mindless enough. But otherwise, yeah. Those who aren't mindless wouldn't want that.

People always ignore the simpler explanation: it’s more time and work to make something a second time on a platform you don’t know and control.
Post reply on HN