Live data from Hacker News

1Password 8 will be subscription only and won’t support local vaults

1password.community

271–280 of 685 posts

Re: 1Password 8 will be subscription only and won’t support local vaults

#271
post #20

1Password used to be native on the Mac, and now it's an Electron app. I'm not going to be using 1Password for this reason, and I encourage you to do the same. Subscription business models and non-native apps are hallmarks of rot by VCs. Dump them!

How does one check if an app running on a mac is native or electron?

Poke around the application bundle or its supporting files directories. On macOS, the Electron.framework folder will typically be somewhere inside of the .app bundle.

Re: 1Password 8 will be subscription only and won’t support local vaults

#272

Earlier quoted context omitted.

> As a long-time 1password shill I have hit my limit and will slowly start migrating to BitWarden Bitwarden's desktop app is built on Electron..

While that's true, the good thing is, that you don't really need it, the browser extension is enough.

Which is also true for 1Password (and LastPass AFAIK).

Re: 1Password 8 will be subscription only and won’t support local vaults

#273

Earlier quoted context omitted.

> However how many subscriptions are we going to have to end up with? I started making a list to answer that question myself. So far, I'm up to SEVENTEEN, but I'm sure I'm still overlooking a few.

I remember dropping cable cos of the costs and now we all have 2-5 streaming services we pay for...?

You can at least cycle through streaming services, dropping them when there's less content of interest and then re-adding when it has accumulated. It's much more difficult to do that with your password manager.

Re: 1Password 8 will be subscription only and won’t support local vaults

#274

Next "feature". We'll scan your passwords so we know you're know a terrorist wink wink

They already do this, it's called Watchtower https://support.1password.com/watchtower/

Yeah but it was opt-in and you could have local vaults only. Not anymore...

Re: 1Password 8 will be subscription only and won’t support local vaults

#275

I've never tried 1Password but I've seen many here who endorse it. Does anyone have experience with both 1Password and KeepassXC? Especially with 1Password local vaults...

I used KeePassXC as the Linux client for 1Password before there was one from AgileBits, and stopped short of implementing _write_ for the opvault format because that wasn't in my use case (and I also had some non-trivial concerns about KeePassXC accepting the PR, so I was trying to pitch it as a way to get more people to import 1Password opvaults)

I would be on-board with implementing the write side to opvault if they'd accept the PR, and would also implement the browser extension protocol server if 1Password would specify it, since as others have pointed out the KeePassXC browser extension is suboptimal

Then again, with all the massive outpouring of Bitwarden support in every single one of these threads ever, I am pretty sure the real solution is just to bite the bullet and jump ship to Bitwarden/vaultwarden like everyone else seems to be doing

I'm willing to stick around long enough to see if AgileBits makes good on their local vault something something, but given the past few years of activity, I'm going with "they're bluffing" or "it'll be a horribly hobbled implementation"

Re: 1Password 8 will be subscription only and won’t support local vaults

#276

Earlier quoted context omitted.

> 1Password’s 2FA OTP auto-fill is such a blessing. Until your vault is somehow compromised and your second factor is no longer distinct from the first one...

I am cognizant of this risk, and assume it, because security is always a spectrum between Secure and Convenient. If I had to pull out my phone every time I wanted to use 2FA, I for sure would not be so liberal to turn it on for all the "low value" properties the way I do now I have never even _heard_ of someone having their 1P master password compromised and the vault(s) exfiltrated (although I grant you it could be…

> I am cognizant of this risk, and assume it, because security is always a spectrum between Secure and Convenient.

Absolutely. But also, in such setup, the security benefit of 2FA/OTP codes are negligible at best since there are no conditions under which only one factor could be compromised without also having the other factor leaked (assuming you're using unique passwords for each identity, which is the entire point of a password manager).

However, I suppose it could be used for bypassing the inconvenience of mandated 2FA scenarios (to the dismay of your company's security team).

Re: 1Password 8 will be subscription only and won’t support local vaults

#277
post #92

Earlier quoted context omitted.

> That said, people arguing that lastpass is better then 1password, given that lastpass has access to your passwords Don’t get me wrong, I hate Lastpass with an unprecedented rage for something that should be a simple utility (I’m forced to use it at work and it’s a time sink), but I don’t know where you get that and would like a source.

sorry, quick correction. It was dashlane. https://blog.dashlane.com/virginia-tech-passwords-study/

Are you sure that the passwords that were the object of the study came from the password manager itself? The paper that is referenced says this in the introduction:

> In this paper, we seek to fill in the gaps by gathering and analyzing a large collection of leaked password datasets across multiple years and various online services

Re: 1Password 8 will be subscription only and won’t support local vaults

#278

1Password used to be native on the Mac, and now it's an Electron app. I'm not going to be using 1Password for this reason, and I encourage you to do the same. Subscription business models and non-native apps are hallmarks of rot by VCs. Dump them!

I recently cancelled Evernote after 12 years of paying for it due to their new Electron client. I've been using 1Password since 2008 and I'll be doing the same thing. I have tolerated the UI regressions and even subscription with version 7, but Electron is just unacceptable for what was once an amazing Mac app that put Apple's apps to shame.

Oh so THAT'S why the Evernote update sucks. The Android client is terrible, it dumps me to the useless Home whenever I scroll to the bottom. It's now unusable. I've begun transitioning to Notion because of it.

Re: 1Password 8 will be subscription only and won’t support local vaults

#279
I appreciate the need for them to do what's right for their business, and that the HN crowd is probably not representative of their broader customer base.

With that said, they've lost a customer here. I would prefer not to pay a subscription, but I might have (though if you do the math, I've had paid upgrades frequently enough I'm not sure they'd have made more money off me with a subscription).

The sticking point is the lack of local vaults and removing the native app. Very disappointing.

The reason I used 1Password to start with and not KeePass was because it was Mac native. It is so deeply depressing to have faster and more efficient computers year-on-year and have all that efficiency wasted by moving to Electron apps. It sounds absurd to say, but there's a real ecological cost to less efficient apps too; it really does add up in aggregate.

The lack of local vault is the ultimate deal breaker, not because I think 1Password are untrustworthy, but because I'm reassured that I don't _need_ to trust them in the same way with a local vault as I need to if they're hosting the vault themselves.

I think what's most disheartening about this is that the customers who dislike this the most are also likely the customers who've been with them the longest and helped them build their business. I know I've been using 1Password since v2.

Given that password management is so central to our daily productivity, jobs, personal lives, I'm not surprised people have some very strong opinions about this. I hope the 1Password management read these threads, but I doubt it.

I will stick with 1Password 7 for as long as I'm able.

Re: 1Password 8 will be subscription only and won’t support local vaults

#280
post #51

The writing was on the wall when they took VC money[1]. Anyone has a good guide to move to Bitwarden/Lastpass? [1] https://techcrunch.com/2019/11/14/fourteen-years-after-launc...

Hi. I'm a feature developer for 1Password, and I want to clarify a few things. First of all, our decision to built the macOS app in Electron was absolutely not driven by VC money. For the past few years, we've been working on consolidating 1Password's business logic into a single Rust-powered core that could be shared across all our apps. This has many advantages: feature consistency across platforms, faster developm…

>Electron suited us perfectly, since we could write our UI code once and make it consistent across Linux, Windows, and Mac.

This is the source of your mistake. Users don't desire to have the same UI across different OS environments, it's only an app's developers that care about that. Cross-platform UIs are inarguably a worse user experience than UIs tailored to the conventions and designs of each OS.

A Mac app that doesn't actually feel or behave like a Mac app is not a good Mac app. The same is true with tvOS apps like YouTube and Prime Video that don't actually feel or act like good tvOS apps.

Post reply on HN