Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password Secrets Automation

blog.1password.com

Post reply on HN
Print view View original

141–150 of 186 posts

Re: 1Password Secrets Automation

#141

Post by loginatnine »

herrvogel- wrote: post #113
JimBlackwood wrote: post #100

Earlier quoted context omitted.

Just out of curiosity, as someone who selfhosts Bitwarden, how is 1Password so much more polished? I’ve never used 1Pass. Just, I’m always amazed by how well Bitwarden works and how there’s not really features I’m lacking.

Two things i miss in Bitwarden coming from 1Password are: 1. One shortcut for unlocking and auto filling. There is a long open issue[1]. 2. Not needing to unlock the extension to add a new login entry. 1Password just detects new logins even when the vault is locked. Otherwise Bitwarden is really solid. [1] https://community.bitwarden.com/t/autofill-shortcut-should-o...

There's an open PR for 1. though it's ignored by the maintainers unfortunately https://github.com/bitwarden/browser/pull/987/files

Re: 1Password Secrets Automation

#142

Post by bwoodruff »

bredren wrote: post #138
bwoodruff wrote: post #129

Earlier quoted context omitted.

That is a limitation imposed by the App Store's rules. We're unable to use the screen recording system permission to look for QR codes on screen. Otherwise all of the OTP features are there. You can drag and drop a QR code onto the reader to add an OTP to a record, for example. - Ben, 1Password

Ben, can you address what is going on with the password save UX / convert to login flow?

I can try. Would you mind elaborating on what the issue is? What are the steps you're taking, and what is or isn't happening as expected? I don't work on our extensions directly, and it may make more sense to put you in touch with the folks who do, but I'm happy to take a look.

Re: 1Password Secrets Automation

#143

Post by bwoodruff »

ydant wrote: post #98
bwoodruff wrote: post #95

Earlier quoted context omitted.

> I do wish you'd figure out the Chrome extensions on macOS, though. I don't understand why I have to choose between excellent browser integration OR more seamless integration with the native app and fingerprint support in the browser extension. We're efforting on that! Thanks for the feedback. We currently have better integration with our 1Password for Linux beta, and that will be rolling out to other platforms as w…

Glad to hear! I use 1Password for family and LastPass for work, and vastly prefer 1Password's UI and feature set.

<3

Re: 1Password Secrets Automation

#144

Post by sooheon »

oarsinsync wrote: post #105
8fingerlouie wrote: post #87

Earlier quoted context omitted.

> I use a password manager but, as a mostly-Apple user, I see very little reason not to just use iCloud Keychain Storing 2FA tokens is one thing iCloud Keychain cannot do (yet ?), and it’s the primary reason I use 1Password over iCloud Keychain. That being said, with Big Sur, 1Password changed its default behavior from being unintrusive to literally obscuring input fields with big “unlock 1Password” pop up’s. I’m cur…

> That being said, with Big Sur, 1Password changed its default behavior from being unintrusive to literally obscuring input fields with big “unlock 1Password” pop up’s. That's not a Big Sur thing, that's a 1Password thing (I've not upgraded to Big Sur still).

This UI change is what may drive me away from a family plan if it doesn't get addressed.

Re: 1Password Secrets Automation

#145

Post by directionless »

patwolf wrote: post #2

This looks interesting. We use 1Password, and I always thought it would be useful to programmatically pull values out and use in our cloud infrastructure. Currently we end up using the secret managers available in AWS or GCP, which seems pretty half baked. In GCP, for example, secrets are stored at a project level. It's not unusual to have certain secrets that are needed by more than one project, which means they get…

For AWS and GCP you can setup cross-project permissions. I've run a single project of secrets, which grants specific access to various service accounts

Re: 1Password Secrets Automation

#146

Post by autoconfig »

bwoodruff wrote: post #142
bredren wrote: post #138

Earlier quoted context omitted.

Ben, can you address what is going on with the password save UX / convert to login flow?

I can try. Would you mind elaborating on what the issue is? What are the steps you're taking, and what is or isn't happening as expected? I don't work on our extensions directly, and it may make more sense to put you in touch with the folks who do, but I'm happy to take a look.

Hey Ben, I'm not the person you're replying to but I'm a long time paying customer and I have observed the same problem. See this post https://news.ycombinator.com/item?id=26799379 below that explains the issue in detail. Creating new login items is a needlessly complex multi-step process that involves converting a password item to a login item and manually filling in your username.

It's really hard for me to understand how you can have an otherwise great product but are failing at what I would argue is one out of the two most important features (creating logins and autofilling).

Re: 1Password Secrets Automation

#147

Post by LilBytes »

tokamak-teapot wrote: post #79
roustem wrote: post #62

Earlier quoted context omitted.

Thank you for your comment, @CodeIsTheEnd! We always built 1Password for ourselves. It is so much easier to develop a product that you use yourself every day. I haven't used the standalone version of 1Password for over 5 years now. The same is true for pretty much everyone working at 1Password. Why? Because the service is much much better and more than just simple syncing of data: - Account recovery for family and bu…

I’m a happy user of 1Password, and while I agree that it’s good to build a product for yourself, I’d also argue that it’s valuable to be keenly aware of where you - or your employees - differ from your other users. I pay yearly for a subscription and sync via 1Password.com I don’t pay a subscription because I think that it’s important or necessary to sync via 1Password.com, though. I’d happily sync via Dropbox (thoug…

I concur. Frankly, 5 licenses for $55 per annum is more than reasonable. I've got friends and family members on my family plan now and paying $1 per month, per user. Is CHEAP.

Re: 1Password Secrets Automation

#148

Post by LilBytes »

dmwallin wrote: post #54
Dedime wrote: post #20

Why would anyone trust their passwords with closed source software, when there's alternatives out there that are?

I trust their business incentives more than my ability to self-host securely and I value the convenience more than the extra cost.

Everyone shit's on SaaS pricing because, well, for many, many well documented reasons.

But with 1Password, I'm paying $55 per annum for 5 licenses for a product that works exceptionally well. Convenience and security here is absolutely important.

And if it means I can throw a license at my girlfriend who previously had a similar password between banking and her wifi and everything in between. And I can set her up, eat $1 a month on her behalf and EASILY onboard her vs. a stand alone license which is not convenient. You can count me as a happy subscriber. 1Password's pricing is great, and I get an awesome product in return.

I don't get the blind "all SaaS products suck and are dark patterns" vitriol that we see on HN so often.

Re: 1Password Secrets Automation

#149

Post by ruph123 »

npunt wrote: post #132
ruph123 wrote: post #102

Earlier quoted context omitted.

> A new feature that adds value is not a 'dark pattern'. Lets not be dramatic. Family plans are in my eyes. They log users more into the platform and makes it very difficult to switch. If you want to move away from Spotify, you now have to convince enough of the others to make it feasible. > Even moving from one-time to subscription isn't a 'dark pattern' I did not claim that it was one. I also was not even mad about…

I'm trying to charitably understand what you're advocating for but it sounds like you're arguing that getting multiple people to use any app is criteria for dark pattern because once they do start using that app, to switch you have to convince them as a group. So.. should everyone use different apps? Or is a protocol the solution? As far as where data is stored, which sounds a bit like a different argument, I guess w…

I think you are interpreting too much into my side comment of “its a dark pattern I guess”. Hereby I retract this part of my statement.
Post reply on HN