Live data from Hacker News

1Password 8 will be subscription only and won’t support local vaults

1password.community

361–370 of 685 posts

Re: 1Password 8 will be subscription only and won’t support local vaults

#361
post #195

1Password used to be native on the Mac, and now it's an Electron app. I'm not going to be using 1Password for this reason, and I encourage you to do the same. Subscription business models and non-native apps are hallmarks of rot by VCs. Dump them!

When I was 18, I wrote some shareware and asked for $10 from those who used and liked the program. Lots of nice people from all over the planet sent in some money, and sometimes with letters. Most often it was a thank you note. Sometimes people requested more features in return for paying the requested amount. And occasionally they'd tack on whatever extra they thought those features were worth to them. (That amount…

I don't know how subscription fixes your problem. Now people will still yell at you, even once you've moved on to other projects, and even more people will do so since they actually pay and assume that it is your obligation. You haven't fixed the "people are assholes" problem.

A better solution honestly is just to accept some percentage of people will be little assholes but hopefully, as you remembered before your friend brought it up, that most people are gracious and kind. Focus on those people.

Re: 1Password 8 will be subscription only and won’t support local vaults

#362
post #81

Earlier quoted context omitted.

Actually a sensitive product is exactly where this does NOT make sense. No matter how good their security is with their cloud version it will still be less secure than having a vault locally on your disk. That is a fact. Subscription services to me are only justified if they are providing a SERVICE which they are with the web version and ability to sync through their own servers, however, using a local version with y…

Hi, I work for 1Password. I can understand your frustration that we're phasing out local vaults. Luckily, I have some good news: we're currently running a survey to gauge user interest in self-hosting options. If you're interested, go to https://survey.1password.com/self-host/ and let us know your thoughts. Thanks!

Too little, too late. You've already burnt trust here.

Re: 1Password 8 will be subscription only and won’t support local vaults

#364

Maybe I'm missing something here, but I've never understood the value of any of these password services. How can it possibly be more secure to have your entire digital life hackable with a single cloud based point of failure? Surely it's safer to simply use an encrypted text file on your local PC.

Hi. I'm a features developer for 1Password. You raise a very good question (one that I used to have myself, before I started working here). I would recommend you read our security whitepaper ( https://1password.com/files/1Password-White-Paper.pdf ) if you want details, but the TL;DR is that we don't know your account password and our servers only store your encrypted information (which we cannot read), and communicat…

I read the paper when it was published, and wasn't great then and it's definitely not great now.

Re: 1Password 8 will be subscription only and won’t support local vaults

#365

Earlier quoted context omitted.

> Especially when the product fits into $0 software so $4.99 is infinitely higher than $0. What is the competition that costs $0? Bitwarden is $3.33/mo for equivalent functionality to the $4.99/mo plan from 1Password.

KeePass ( https://keepass.info/ ) with something like Nextcloud ( https://nextcloud.com/ ) or any other solution for syncing password databases across devices. Let's Encrypt SSL/TLS certificates are free, as is Apache/Nginx/Caddy to reverse proxy Nextcloud or any other solution (if a web based interface is needed). You might also need something like ngrok ( https://ngrok.com/ ) for publically accessing the instance i…

This reads like that notorious HN comment about it being trivially easy to roll your own Dropbox. Our time has value. Good UI has value. How much time is saved by just using a service like 1Password versus the design, setup, maintenance, and ongoing use of a system like you suggest with all those individual pieces?

Re: 1Password 8 will be subscription only and won’t support local vaults

#366

Earlier quoted context omitted.

I come at it from a slightly different angle. I got in when it was syncing via Dropbox and iCloud, and it worked perfectly fine. The switch to a subscription service is a forced downgrade for me; it's putting functionality I already have behind a subscription. This is particularly an issue since the old versions (versions I paid for, mind you) are slowly going away (typically as a recompilation and submission is requ…

Same story for me. I switched to the KeePassXC ecosystem eventually as a result — it's open source, has compatible clients for just about everything, and has one-click import for 1Password vaults.

This is my new target platform. I really like how broadly it's spread since my first evaluation a decade ago.

Re: 1Password 8 will be subscription only and won’t support local vaults

#367

Earlier quoted context omitted.

Hi. I'm a feature developer for 1Password, and I want to clarify a few things. I've already posted this elsewhere, but I've seen multiple threads spreading misinformation that our technical decisions are being driven by VC funding. This could not be farther from the truth. We have been working on these changes long before we received any form of outside investments. Over the past few years, we've been working on cons…

> I've already posted this elsewhere, but I'm seeing some misinformation that our technical decisions are being driven by VC funding. This could not be farther from the truth. We have been working on these changes long before we received any form of outside investments. That's worse, not better. At least being forced to by investors makes sense. The current direction of travel being voluntary means you've just got a…

> The current direction of travel being voluntary means you've just got a bad nose for building security.

Could you elaborate on this?

Re: 1Password 8 will be subscription only and won’t support local vaults

#368

Earlier quoted context omitted.

Subscription models make sense for something that needs to stay evergreen. Why does a password manager need a subscription? My password should never touch a 3rd party’s server, I don’t need extra features, I don’t need a login, I don’t need long-term or even short-term support. What ongoing development does a password manager have? Is it that buggy from the get-go to need constant updates?

>Why does a password manager need a subscription? It does not, that is why there is KeePassXC and other alternatives.

Thanks, I haven’t tried that one before.

Re: 1Password 8 will be subscription only and won’t support local vaults

#369

I guess I’m the outlier in being very happy with 1Password and fine with paying for the subscription service. Not only is 1Password the best password manager I’ve used, but it makes it seamless to share stuff with my wife. I don’t care if 8 is an Electron app either, considering I usually interact with it via the browser anyway with their extension. (Also I know that the majority of what they wrote for it is Rust and…

I think removing the self-managed data store feature makes sense even if not everyone likes it. It removes a source of architectural complexity, and most users aren't looking for local storage anyway.

Personally, the problem of managing reliable persistence of my password database just isn't something I want to spend time on, and the incremental difference in security posture is uninteresting to me given that it's encrypted at rest anyway. In terms of waking hours spent worrying about the security of my household IT, the security and persistence of sensitive documents (mainly vs. ransomware) is a bigger problem and I like that my passwords aren't tied up in that mess.

Re: 1Password 8 will be subscription only and won’t support local vaults

#370
post #296

Earlier quoted context omitted.

But how can you justify removing the ability to have a local vault? Why would anyone think for a second that it would be a good idea to force people to store every password for everything in their life in your cloud without an opt out? That, even more than Electron and the subscription model (both which do bother me), is an absolutely deal breaker. I've paid for every version of 1Password since v3 in 2009, but I'm do…

The original article goes into great detail as to why we're moving away from local vaults. That being said, we are looking into gauging user interest in self-hosting. Please take a look at our survey [1] if you want to share your thoughts. Hope that helps! [1] https://survey.1password.com/self-host/

May just want to stop before you step in things further. You’re honestly just making things worse.
Post reply on HN