Live data from Hacker News

Apple unveils 'Passwords' manager app at WWDC 2024

zdnet.com

71–80 of 767 posts

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#72

I started using Keychain pretty much primarily this year (other than 1Password at work) and it works pretty seamlessly for me (granted Apple devices only). Even the Chrome extension works quickly as if it were a native part of Chrome. Glad they're splitting it out of System Settings into a dedicated app. I've also started migrating family members to it. It'll be way easier for the less technical people since it's alr…

I often was looking to see "do I have that in keychain" and ... I'd forget where to find it as it wasn't a dedicated app.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#75
post #32

It's good to see that 1Password is staying several steps ahead here to avoid being "Sherlocked" by Apple. The new SSH key manager feature is an example of something Apple's unlikely to address for years, if ever. https://developer.1password.com/docs/ssh/manage-keys/

Is this not exactly what the Apple Keychain does? Manage keys?

Might sound like a technicality, but: iCloud Keychain can store the passphrase but can't store the key itself. You still need an encrypted private key on-disk to use this: https://apple.stackexchange.com/a/250572 .

1Password saves the key itself in the encrypted vault and implements an SSH agent that can then interact with OpenSSH etc. and provide key operations, like how a physical dongle would function.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#76

Why would I use it over Bitwarder?

I'll be trying this out, but moving me from Bitwarden will prove quite a feat - especially since it was the best option for me after trying over 10 password managers while I was still window shopping for one.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#77

So… this new app does most of what the depreciated “Keychain” app did, except now it’s got a iOS-looking UI. Huzzah, I guess, the “passwords” section in the iOS-restyled system prefs sure wasn’t substituting for Keychain for me. Passwords doesn’t appear to handle secure notes, though, and I still have a few of those, too. I still really hate the iOS-restyled system prefs. Tiny unresizable text, a long vertical scroll…

I noticed a "Notes" section in password items. So, I guess in theory you could utilize those.

But my biggest one is wanting to store secure files. Think copies of a drivers license, signed documents or various certs and keys. That's not being covered here either for me sadly. It's not a super common situation for me so I can probably find an alternative app for that purpose.

Edit: Also for notes, I'd just password protect something in the Notes app. But that's just me.

Re: Apple unveils 'Passwords' manager app at WWDC 2024

#78

Surprised to see Forget LastPass , as if it's the current incumbent. It very much isn't, at least in my perception. LastPass disgraced itself into irrelevance back in 2022. https://en.wikipedia.org/wiki/LastPass#2022_customer_data_an...

Off-topic comment to urge any LastPass users before Sept 16 2022 to please look into parent post's link. LastPass said accounts deleted before June 21 2022 were not affected if that's still up to date.

If I understand:

Attackers got access to LastPass's account data backups directly and in bulk. 2FA doesn't help here.

While LastPass since increased their password rounds for new accounts to 100k+, many users especially long-time users had them set well below and never updated. Reports of 5000 rounds, 500 rounds, ... even 1 round.

URLs were not encrypted. If you had sensitive URLs, I think you have to treat them as compromised. If you had crypto exchange logins or high-value URLs, I'd imagine you might attract extra attention.

[edit for typos].

Post reply on HN