441–450 of 685 posts
I haven't had a single bad experience with Bitwarden. I even pay for it now and still run it locally just to support them. Highly recommended if you don't want to be forced into 1Password's service.
I moved to Bitwarden from Lastpass also, and I'm definitely happy for the most part. The chrome extension leaves a tiny bit to be desired, but definitely still usable: * Not as good about determining correct sign-in URL and lots of times will send me through the auth redirect from registration * Launching sites without mouse isn't possible (shortcut exists to open extension but can't select site to launch it using ar…
Earlier quoted context omitted.
I'm curious about how you see the attack surface increasing when using 1Password. My knowledge of how it works is that it always stores your passwords in an encrypted blob that can only be decrypted with a combination of username, "master password", and vault password. So no matter if it's in Dropbox, 1Password's servers, or your own hard drive, if anyone obtains a copy of the password file they still have to crack i…
> So no matter if it's in Dropbox, 1Password's servers, or your own hard drive, if anyone obtains a copy of the password file they still have to crack it before they gain access to anything. Except that they control the client that I'm entering the master password into. So either the password is sent to their servers anyway or a malicious actor could simply update the client to do so.
Earlier quoted context omitted.
I come at it from a slightly different angle. I got in when it was syncing via Dropbox and iCloud, and it worked perfectly fine. The switch to a subscription service is a forced downgrade for me; it's putting functionality I already have behind a subscription. This is particularly an issue since the old versions (versions I paid for, mind you) are slowly going away (typically as a recompilation and submission is requ…
Same story for me. I switched to the KeePassXC ecosystem eventually as a result — it's open source, has compatible clients for just about everything, and has one-click import for 1Password vaults.
I am a 1PW subscription user and am happy with the product (however, seeing they are moving to Electron means that is very subject to change...) but Saying that "customers voted with their wallet" and chose subscriptions is disingenous Ever since they've had subscriptions they've made the standalone license page extremely difficult to find on their site. They really didn't give regular users a "choice"- they dark-pat…
Starting with 1Password 7's beta, they "hid" the standalone option on the site and then removed it completely and only allowed for purchasing standalone versions through the app itself but that was announced prior to them doing it.
I am a 1PW subscription user and am happy with the product (however, seeing they are moving to Electron means that is very subject to change...) but Saying that "customers voted with their wallet" and chose subscriptions is disingenous Ever since they've had subscriptions they've made the standalone license page extremely difficult to find on their site. They really didn't give regular users a "choice"- they dark-pat…
0: https://com-agilebits-users.s3.amazonaws.com/dave/1password7...
Earlier quoted context omitted.
1Password’s 2FA OTP auto-fill is such a blessing. It saves me so much time compared to how I used to have to do it — pull out phone, unlock, open Authy, wait forever for it to load, type in code, put phone away… It’s the little things that all add up. I’m very happy with 1Password — been using it for 10 years, and happy to subscribe, considering it’s probably my most-used utility app.
> 1Password’s 2FA OTP auto-fill is such a blessing. Until your vault is somehow compromised and your second factor is no longer distinct from the first one...
I am a 1PW subscription user and am happy with the product (however, seeing they are moving to Electron means that is very subject to change...) but Saying that "customers voted with their wallet" and chose subscriptions is disingenous Ever since they've had subscriptions they've made the standalone license page extremely difficult to find on their site. They really didn't give regular users a "choice"- they dark-pat…
> Saying that "customers voted with their wallet" and chose subscriptions is disingenous Honestly, I wouldn't mind paying a reasonable price for the 1Password service if it wasn't a step down in value from what I had before. I have a slightly older version of 1Password and it works fine for my purposes. I've been holding off on the subscription transition because I would derive zero value from switching to subscripti…
Earlier quoted context omitted.
> What ongoing development does a password manager have? I shutter to think about just trying to keep the status quo across all those platforms, devices, browser extensions. How often do we have new versions of iOS or macOS? What about Windows, Android, Linux, Chrome OS? I can think of a TON of work without adding a single feature.
Major releases of MacOS and iOS happen once a year. And most of the time they don’t break existing applications (iOS 12 notwithstanding). Almost everything from early iPhone OS to 12, and from 12 onwards worked ok, even with major resolution changes. And the fact that we need to constantly change stuff just for the sake of change is the problem. To add to this: I’m perfectly happy to pay a premium price for software…
But you take all those platforms and all those extensions and the result is maintenance by itself is constant work. I'm not talking about change for the sake of change. I'm talking about the work just to keep the features that you have.
I have personal projects I'm working on where it feels like all I have time for is just keeping up with security updates, Ubuntu versions, DB version upgrades. Work projects are even worse with SOC2 requirements and the endless stream of CVEs.
There's no way a password manager can do nothing for 3-4 years ignoring security vulnerabilities in their dependencies that need to be patched.
