Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

1Password Has Raised $620M

blog.1password.com

Post reply on HN
Print view View original

701–710 of 723 posts

Re: 1Password Has Raised $620M

#701

Post by lkbm »

Transisto wrote: post #696
lkbm wrote: post #438

Earlier quoted context omitted.

Based on https://www.future.1password.com/ I'm guessing it will be closer to LastPass's auto-login. It still uses the existing username/password form, but autofills and submits for you. So a 1- or 0-click login once you hit the login form, as opposed to the current 3-click system (see login list, click to fill, click to submit). And looks like it also might handle the 2fa portion (which essentially makes it 1fa).

How do you expect to choose which account to get in if there isn't a list to choose from? Currently in Lastpass If you have one account it's auto filled making it a single click.

I would assume it only works if you have a single account. That's the most common situation, though.

LastPass has the option to autofill and auto-submit. 1Password doesn't, but that's my guess for what's coming.

Re: 1Password Has Raised $620M

#702

Post by remram »

samgranieri wrote: post #76

I really wish they weren't doing away with 1password classic and the native mac app. I like the fact I bought a license, that I can store the data on dropbox or icloud, and it works just fine. Yes, this is old news and sour grapes on my part. I just don't yet feel like migrating to bitwarden. I've been using 1password for 12 years since I saw it on a tutorial on peepcode.com. I actually taught my mother how to use it…

Bitwarden is a bit of a pain to self-host, it's built for a much bigger scale. Vaultwarden is a simpler solution, and is compatible with the Bitwarden apps. For a handful of users it is worth a look: https://github.com/dani-garcia/vaultwarden

Re: 1Password Has Raised $620M

#703

Post by pantulis »

kitsunesoba wrote: post #570
pantulis wrote: post #514

Earlier quoted context omitted.

In Apple land you have Strongbox or Keepassium. Both are fine projects based on Keepass technology so you are basically safe and the developers are even in cool terms with themselves.

Looking around, on macOS there’s also MacPass[0] which looks decent (good enough that I could see myself contributing for the last few % of polish), and gnome-passwordsafe[1] looks reasonable on Linux (if a bit too mobile-y for a desktop app). The only notable hole in the platforms I use is Windows… perhaps it’s time to spin up a WinUI Keepass project. [0]: https://github.com/MacPass/MacPass [1]: https://apps.gnome.o…

The issue I see with KeePass as an standard password format is that, afaik, it does not have the native concept of OTP which is critical these days. I understand some developers have come up with ways to store the needed information to generate the OTP in some of the metadata fields. But that does not guarantee OTP interoperability between different Keepass implementations accessing the same Keepass database.

For example, using MacPass I can access my KeePass DB managed by Strongbox from iCloud Drive but the OTP field seems to be opaque to MacPass, it does not know what to do with it.

Re: 1Password Has Raised $620M

#704

Post by fortuna86 »

Graziano_M wrote: post #491
fortuna86 wrote: post #463

Earlier quoted context omitted.

Works for me on Chrome too, but not Brave (my browser of choice). Are there any security concerns holding on to 1p 6.0 ? I notice the mobile app still sees updates, but could there be in theory an unpatched security hold in the desktop app ?

That's part of the reason I am OK with just copying and pasting in firefox. It keeps the desktop app isolated from the browser.

Yeah but the chrome plugin still works at full functionality.

Re: 1Password Has Raised $620M

#705

Post by kchameleon1234 »

mdaniel wrote: post #679
kchameleon1234 wrote: post #644

Earlier quoted context omitted.

It's not v8 at least, I use it on 7 just fine (though I do use the cloud offering). I don't see why it would be tied to that though considering it's just an API integration that saves the card into your 1password for the site you're on and then fills in the credentials. That _should_ theoretically work with a local vault as well on v7.

That same logic holds for the fastmail vanity email aliases, too, in that it's just an API integration; does your v7+cloud have that integration, too?

It does! I was actually considering switching to BitWarden right when the Fastmail integration came out and that's what kept me with 1Password.

Re: 1Password Has Raised $620M

#706

Post by Graziano_M »

fortuna86 wrote: post #704
Graziano_M wrote: post #491

Earlier quoted context omitted.

That's part of the reason I am OK with just copying and pasting in firefox. It keeps the desktop app isolated from the browser.

Yeah but the chrome plugin still works at full functionality.

Yes but I don't want to use chrome, especially after they break ad blocking.

To answer your question about the security: I don't know. I don't audit it, and copying and pasting lets me not really have to worry about the security of the browser extension.

Re: 1Password Has Raised $620M

#707

Post by hcurtiss »

nsm wrote: post #482
hcurtiss wrote: post #88

I don't know if anybody uses Edge like me, but I feel like people should know that Edge with Authenticator works VERY WELL for password management. It is very close to feature parity with Lastpass and 1Password, it's cross platform, and it's free. After something like eight years, we dropped our subscription to LastPass.

How easy is it to use with random notes/apps on mobile? Some reasons I prefer a non-browser manager: - On Android/iOS, 1P will integrate with the system password manager APIs to sign in to apps - I can generate/store arbitrary password-like things (SSH key passwords, secret question made up answers, 2FA backup codes) that are not associated with specific domains. At least in Chrome's default password manager there wa…

On iOS, at least, when prompted for auto-fill, you can random search for other passwords. It doesn't really have a "notes" field, but you can definitely save a password without an affiliated website.

Re: 1Password Has Raised $620M

#708

Post by RayVR »

bfung wrote: post #647
RayVR wrote: post #630

Earlier quoted context omitted.

your opinion that it's more clunky than lastpass is really interesting to me. It runs completely counter to 99.9% of comments I've seen on HN. Personally, I have no experience with lastpass. Just wanted to point out this anomaly.

Lastpass incidents are so (in)famous, it’s on Wikipedia: https://en.m.wikipedia.org/wiki/LastPass 2011 2015 2016 2017 2019 2021 Those are just the famous ones. After 2014, their plugins and UX were so bad, I switched my team(s) to 1Password and never looked back.

This is the sentiment I've seen many times on HN.

Re: 1Password Has Raised $620M

#709

Post by dexterdog »

ojilles wrote: post #305
dexterdog wrote: post #91

Earlier quoted context omitted.

I read that as "hashicorp vault, but more expensive with wildly varying pricing schemes."

I read it as Hashicorp Vault, but for all employees, not just (IT) engineers.

What is the market for a tool like Vault outside of engineering or IT?

Re: 1Password Has Raised $620M

#710

Post by beart »

jwineinger wrote: post #137
beart wrote: post #68

Earlier quoted context omitted.

Bitwarden has an import option that will pull from a lot of other password managers. However, it definitely isn't perfect.

What parts don't you like? I'm considering migrating to something else after this news

I imported from 1password. I found the following problems.

- Some items did not import correctly at all because the 1password export format did not quote values (CSV). This means that if I have a password with a comma in it, I get two broken entries. This is more of a 1password issue though.

- 2FA tokens did not import and would have to be manually reset. I guess this is to be expected though.

- Some fields had different names than bitwarden was expecting, so values were imported into the wrong destination and had to be manually corrected.

This was a while back so I'm not sure if anything has been improved.

Post reply on HN