Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password 8 will be subscription only and won’t support local vaults

1password.community

Post reply on HN
Print view View original

371–380 of 685 posts

Re: 1Password 8 will be subscription only and won’t support local vaults

#371

Post by l72 »

nightski wrote: post #3

I haven't had a single bad experience with Bitwarden. I even pay for it now and still run it locally just to support them. Highly recommended if you don't want to be forced into 1Password's service.

Is there a good command line client for bitwarden. I recently moved from keepass (using kpcli) to bitwarden (so I can share passwords with my spouse), but am so far, very unhappy with the command line tools.

The official command line tool is way too clumsy. I've tried rbw and rbw-fzf which are ok. rbw doesn't let me view all properties of an entry (attachments, notes), and rbw-fzf has issues if things have spaces in them and is limited to only passwords, not other info.

Re: 1Password 8 will be subscription only and won’t support local vaults

#372

Post by ulisesrmzroche »

yssrn wrote: post #144
yesimahuman wrote: post #68

Earlier quoted context omitted.

This is ridiculous. Electron works great, and if this leads to more frequent updates and a more consistent experience across platforms, that's a win for users. 1Password's Windows client, for example, has always felt behind the Mac edition, and if this brings parity and a higher feature and update velocity, that's a win. I have at least three Electron apps open right now and they are all great experiences that the va…

A password manager doesn't need frequent updates. Instead, the priorities should be reliability, UX responsiveness, and light resource usage.

That's achieved with frequent updates.

Re: 1Password 8 will be subscription only and won’t support local vaults

#374

Post by xg15 »

FreezerburnV wrote: post #212
runlevel1 wrote: post #123

Earlier quoted context omitted.

I'd be ok with paying an annual fee for the app. What I have zero interest in is increasing my attack surface solely for their bottom line. I'm also increasingly uncomfortable with the company handling my passwords engaging in the sort of spin and dark patters we've seen from AgileBits in the past few years.

I'm curious about how you see the attack surface increasing when using 1Password. My knowledge of how it works is that it always stores your passwords in an encrypted blob that can only be decrypted with a combination of username, "master password", and vault password. So no matter if it's in Dropbox, 1Password's servers, or your own hard drive, if anyone obtains a copy of the password file they still have to crack i…

> So no matter if it's in Dropbox, 1Password's servers, or your own hard drive, if anyone obtains a copy of the password file they still have to crack it before they gain access to anything.

Except that they control the client that I'm entering the master password into. So either the password is sent to their servers anyway or a malicious actor could simply update the client to do so.

Re: 1Password 8 will be subscription only and won’t support local vaults

#375

Post by jl_agilebits »

Mindwipe wrote: post #364
jl_agilebits wrote: post #267

Earlier quoted context omitted.

Hi. I'm a features developer for 1Password. You raise a very good question (one that I used to have myself, before I started working here). I would recommend you read our security whitepaper ( https://1password.com/files/1Password-White-Paper.pdf ) if you want details, but the TL;DR is that we don't know your account password and our servers only store your encrypted information (which we cannot read), and communicat…

I read the paper when it was published, and wasn't great then and it's definitely not great now.

> I read the paper when it was published, and wasn't great then and it's definitely not great now.

Would you mind elaborating on this?

Re: 1Password 8 will be subscription only and won’t support local vaults

#376

Post by ValentineC »

staticassertion wrote: post #341
ValentineC wrote: post #281

Earlier quoted context omitted.

> Ps. They can delete accounts too: https://support.1password.com/add-remove-family-members/ This makes losing local vault support an even bigger cause for alarm: > After you remove a family member’s account, they can’t sign in to 1Password, which means: > They lose all the items in their Private vault. Because the items weren’t shared with any other family members, no one will be able to access them. Imagine: the ac…

So don't use the family plan?

It's not a problem right now with 1Password 7, because family members are (as far as I know) able to use local vaults too.

Re: 1Password 8 will be subscription only and won’t support local vaults

#377

Post by forty »

xondono wrote: post #335
InTheArena wrote: post #137

Earlier quoted context omitted.

sorry, quick correction. It was dashlane. https://blog.dashlane.com/virginia-tech-passwords-study/

> Virginia Tech researchers led by Dr. Wang have collected a number of publicly available password datasets from the Internet in January 2017. The datasets were obtained from various online forums and data archives. It looks like they just used already leaked passwords.

Absolutely, I can confirm we don't have access to anyone's password, except those that have leaked already.

Re: 1Password 8 will be subscription only and won’t support local vaults

#378

Post by seqizz »

stuzenz wrote: post #201
evanb wrote: post #178

Also a stand-alone user since 1pw4. This news finally got me to try pass, the command-line utility. https://www.passwordstore.org/ The format is plain text. You can git control your password repo. You can organize into directories, etc. It has an extension architecture; you can have it generate otps, for example. You can have specific passwords unlock with more than 1 key, if you want to do eg. family or business sha…

I was reading through the comments wondering why so many technically capable people are paying for a password store service when passwordstore works nicely in the space and gives you some comfort in knowing how it works. I highly recommend pass. My set up is as follows: - setup the key, share the private key to other devices who are going to use the same pass store; - use syncthing to sync my passwords between device…

I also use and love pass on desktop, even with syncthing and browserpass, all perfectly working. But I am using yubikey to hold my key and that makes it not a good match for mobile setup. Also last time I tried, the mobile apps mentioned were not so easy to use, so I gave up on that front.

Re: 1Password 8 will be subscription only and won’t support local vaults

#379

Post by yreg »

scrollaway wrote: post #306
bgentry wrote: post #280

Earlier quoted context omitted.

>Electron suited us perfectly, since we could write our UI code once and make it consistent across Linux, Windows, and Mac. This is the source of your mistake. Users don't desire to have the same UI across different OS environments, it's only an app's developers that care about that. Cross-platform UIs are inarguably a worse user experience than UIs tailored to the conventions and designs of each OS. A Mac app that d…

> Users don't desire to have the same UI across different OS environments Um, speak for yourself. I personally don't like having the docs showcase completely different UIs to the one I'm using. I also like having an app i can run on Linux, which has been happening a lot more since Electron became a thing (no sane company wants to write apps in GTK, and much as Qt is a great toolkit it requires expertise most SaaS ven…

There's an argument to be made the other way around:

Maybe if you choose to use multiple platforms you should just deal with the multiple approaches to UI? Why should the single platform citizens suffer from a UI that's inconsistent with the rest of the platform?

To stretch it to an absurd case:

Imagine Slack decided that the shortcut to copy text will be Ctrl+C on all platforms. And Windows users who occasionaly use a mac would rejoice because it would save them from having to think which button to press.

Post reply on HN