Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password 8 will be subscription only and won’t support local vaults

1password.community

Post reply on HN
Print view View original

401–410 of 685 posts

Re: 1Password 8 will be subscription only and won’t support local vaults

#401

Post by larkost »

jl_agilebits wrote: post #320
bgentry wrote: post #280

Earlier quoted context omitted.

>Electron suited us perfectly, since we could write our UI code once and make it consistent across Linux, Windows, and Mac. This is the source of your mistake. Users don't desire to have the same UI across different OS environments, it's only an app's developers that care about that. Cross-platform UIs are inarguably a worse user experience than UIs tailored to the conventions and designs of each OS. A Mac app that d…

> Users don't desire to have the same UI across different OS environments, it's only an app's developers that care about that. I guess we'll have to agree to disagree on that. I personally enjoy having consistent user interfaces across the apps that I use, and there are many other people that would say the same, so I would avoid making broad assumptions. From our perspective, consistent user interfaces are a win-win…

This is a curious response. I would have used the same reasoning as an argument against Electron (or similar unified development systems): they are not consistent with all of the other native apps that people use.

I don't know if your reasoning is that looking like a web app means it is consistent with those apps, or that the apps look the same across platforms, but neither of those arguments are compelling to me. I chose the platform I am on because I think the interface is a good one that makes me more productive.

And I have never found an Electron app (or web app in general) that is as high quality as good native apps (on any platform). There are just so many compromises, and I am not even considering resource usage here. Everything just feels a little slip-shod.

Re: 1Password 8 will be subscription only and won’t support local vaults

#402

Post by beefjerkins »

slg wrote: post #365
KronisLV wrote: post #346

Earlier quoted context omitted.

KeePass ( https://keepass.info/ ) with something like Nextcloud ( https://nextcloud.com/ ) or any other solution for syncing password databases across devices. Let's Encrypt SSL/TLS certificates are free, as is Apache/Nginx/Caddy to reverse proxy Nextcloud or any other solution (if a web based interface is needed). You might also need something like ngrok ( https://ngrok.com/ ) for publically accessing the instance i…

This reads like that notorious HN comment about it being trivially easy to roll your own Dropbox. Our time has value. Good UI has value. How much time is saved by just using a service like 1Password versus the design, setup, maintenance, and ongoing use of a system like you suggest with all those individual pieces?

I was just thinking the exact same thing. For technical and especially non-technical folk, getting a full nextcloud host set up and working is going to take significantly more time than a simple login into 1Password, where it just works.

Re: 1Password 8 will be subscription only and won’t support local vaults

#403

Post by ramesh31 »

jl_agilebits wrote: post #267
ramesh31 wrote: post #180

Maybe I'm missing something here, but I've never understood the value of any of these password services. How can it possibly be more secure to have your entire digital life hackable with a single cloud based point of failure? Surely it's safer to simply use an encrypted text file on your local PC.

Hi. I'm a features developer for 1Password. You raise a very good question (one that I used to have myself, before I started working here). I would recommend you read our security whitepaper ( https://1password.com/files/1Password-White-Paper.pdf ) if you want details, but the TL;DR is that we don't know your account password and our servers only store your encrypted information (which we cannot read), and communicat…

>the TL;DR is that we don't know your account password and our servers only store your encrypted information (which we cannot read), and communication is done over HTTPS with an additional layer of encryption via the SRP (Secure Remote Password) protocol.

I understand that my data is safe with you guys at rest. I'm sure your security protocols are top notch. But it's all about attack surface. Things can and do go wrong on the internet all the time. Bits get flipped, certs expire, DNS cache gets poisoned, employees get phished, and MITM is an omnipresent threat. I'd just rather avoid all of that.

Re: 1Password 8 will be subscription only and won’t support local vaults

#404

Post by rcarmo »

frosted-flakes wrote: post #80
tectonic wrote: post #5

Well darn, I guess I have to find a new password manager. 1Pass + Dropbox sync was so good.

Unless they remove support for local vaults from their mobile apps, you can continue using the classic self-synced method. I sync my 1Password vault across Android and Windows using SyncThing, using 1Password 7 and the legacy browser extension in Firefox. I don't get the inline 1Password prompt in password inputs, but that's the only disadvantage (Ctrl+Alt+\ brings up the password selector anywhere in the OS, not jus…

I fully expect that to happen. And it will catch many people unawares when their iOS app automatically updates and prompts them to "upgrade" to the sync service.

Re: 1Password 8 will be subscription only and won’t support local vaults

#405

Post by aeturnum »

bgentry wrote: post #280
jl_agilebits wrote: post #261

Earlier quoted context omitted.

Hi. I'm a feature developer for 1Password, and I want to clarify a few things. First of all, our decision to built the macOS app in Electron was absolutely not driven by VC money. For the past few years, we've been working on consolidating 1Password's business logic into a single Rust-powered core that could be shared across all our apps. This has many advantages: feature consistency across platforms, faster developm…

>Electron suited us perfectly, since we could write our UI code once and make it consistent across Linux, Windows, and Mac. This is the source of your mistake. Users don't desire to have the same UI across different OS environments, it's only an app's developers that care about that. Cross-platform UIs are inarguably a worse user experience than UIs tailored to the conventions and designs of each OS. A Mac app that d…

I don't have super strong feelings about native v.s. cross-platform UIs, but I think I (and maybe others) think about this question from the "reverse" direction. I expect a given service / app / functionality to work the same everywhere, no matter the platform. This is true of tools I use through my terminal or tools I use in GUIs. Other approaches feel to me like they make using the product more difficult - I may not be able to help someone else on another OS use it, it may mean that an obscure platform has more bugs than a unified approach, etc. I understand why native may make sense, but I do not think it is a given.

Re: 1Password 8 will be subscription only and won’t support local vaults

#406

Post by jonathantf2 »

ekianjo wrote: post #384
slg wrote: post #365

Earlier quoted context omitted.

This reads like that notorious HN comment about it being trivially easy to roll your own Dropbox. Our time has value. Good UI has value. How much time is saved by just using a service like 1Password versus the design, setup, maintenance, and ongoing use of a system like you suggest with all those individual pieces?

so getting to know how to do things by yourself is a waste of time?

I know exactly how to do it, I've tried out what has been described above.

I've got a lab for stuff I want to tinker with, but a password manager is seen as an "essential service" to me like e-mail and music. I'd much prefer to pay a bit per month and have a team of professionals deal with it if the servers go down.

If at the end of the day my home server breaks and I want to get on and watch Amazon Prime/Netflix/whatever I still can with a hosted password manager. I value my time and sanity a lot more than £2 a month.

Re: 1Password 8 will be subscription only and won’t support local vaults

#407

Post by MajesticHobo2 »

xg15 wrote: post #374
FreezerburnV wrote: post #212

Earlier quoted context omitted.

I'm curious about how you see the attack surface increasing when using 1Password. My knowledge of how it works is that it always stores your passwords in an encrypted blob that can only be decrypted with a combination of username, "master password", and vault password. So no matter if it's in Dropbox, 1Password's servers, or your own hard drive, if anyone obtains a copy of the password file they still have to crack i…

> So no matter if it's in Dropbox, 1Password's servers, or your own hard drive, if anyone obtains a copy of the password file they still have to crack it before they gain access to anything. Except that they control the client that I'm entering the master password into. So either the password is sent to their servers anyway or a malicious actor could simply update the client to do so.

This is true of any password manager.

Re: 1Password 8 will be subscription only and won’t support local vaults

#408

Post by lotsofpulp »

donohoe wrote: post #202
TheRealDunkirk wrote: post #173

Earlier quoted context omitted.

> However how many subscriptions are we going to have to end up with? I started making a list to answer that question myself. So far, I'm up to SEVENTEEN, but I'm sure I'm still overlooking a few.

I remember dropping cable cos of the costs and now we all have 2-5 streaming services we pay for...?

And you can cancel and subscribe at a moments notice, unlike cable contracts and having to use cable boxes and equipment rental fees. And you can watch whenever, wherever you want.

Sounds like a great improvement to me. You also do not have to pay for 2 to 5 streaming services. You can choose 1, or 2, or however many you want.

Re: 1Password 8 will be subscription only and won’t support local vaults

#410

Post by slipperlobster »

thallavajhula wrote: post #131
FreezerburnV wrote: post #50

I guess I’m the outlier in being very happy with 1Password and fine with paying for the subscription service. Not only is 1Password the best password manager I’ve used, but it makes it seamless to share stuff with my wife. I don’t care if 8 is an Electron app either, considering I usually interact with it via the browser anyway with their extension. (Also I know that the majority of what they wrote for it is Rust and…

I've been using 1Password for 3 years now. Been paying $35/year and I'm with you on this one. I really like their service. The integrations are great. I rarely use their Mac app. I use my Apple Watch to unlock 1Password in my browser. That for me, is a game changer. It's such a seamless experience. I'm a happy customer and I love the service.

> I use my Apple Watch to unlock 1Password in my browser.

Can you point me to where this gets set up? I'd love to do this.

Post reply on HN