Earlier quoted context omitted.
Apple Wallet is for debit/credit cards, it already exists and works.
What if I wanna have a shared card?
Shared with someone else?
Isn't that like against every rule of every bank ever everywhere?
Apple unveils 'Passwords' manager app at WWDC 2024
711–720 of 767 posts
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#712Earlier quoted context omitted.
keepassxc works for me on android, windows, and mac
keepassxc is incredible, truly slept on. I use safari keychain as well, as a copy. But my master store is keepass. It boggles my mind that people pay for 1password. Btw, is keepassxc on Android now or are you referring to one of the many Android keepass apps? I use keepassium on iOS. I pay for protonmail and also store a copy in protonpass. Proton pass has a nice web interface and doesn’t require me to copy a keepass…
> It boggles my mind that people pay for 1password.
I’ve payed for 1Password for 4 years and am a happy customer. But I would also be willing to try KeepassXC if it really offers feature parity.
These are some features important to me, are they supported by KeePassXC?
- Easy password sharing with my wife. We have separate private vaults and a shared vault, and moving a passwords between these vaults is seamless.
- Sync has been seamless for years. I don’t have to worry about e.g. iCloud corrupting my password database and having to restore from off-site backups.
- Integration with many platforms. Currently, that means autofilling/autosaving/generating passwords in common browsers, on MacOS, and on iOS.
- Generating and filling TOTP tokens (no need for Google Authenticator or similar apps).
- Storing and syncing SSH certificates, including acting as an SSH agent (so I have to scan my fingerprint to allow a new SSH authentication).
- Storing non-password items in the encrypted store, e.g. pictures of passports.
- TouchID or FaceID for quick unlocking with everyday use.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#713Yeah please continue your "only on ios" policy.
I will have a PW manager server on LAN and use it everywhere via VPN.
These are the reasons why I don't use Apple products despite the great hardware.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#714Earlier quoted context omitted.
keepassxc is incredible, truly slept on. I use safari keychain as well, as a copy. But my master store is keepass. It boggles my mind that people pay for 1password. Btw, is keepassxc on Android now or are you referring to one of the many Android keepass apps? I use keepassium on iOS. I pay for protonmail and also store a copy in protonpass. Proton pass has a nice web interface and doesn’t require me to copy a keepass…
> It boggles my mind that people pay for 1password. I’ve payed for 1Password for 4 years and am a happy customer. But I would also be willing to try KeepassXC if it really offers feature parity. These are some features important to me, are they supported by KeePassXC? - Easy password sharing with my wife. We have separate private vaults and a shared vault, and moving a passwords between these vaults is seamless. - Sy…
KeePassXC definitely has a lot of those for sure.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#715Normally I’m conflicted when a big tech company comes to stomp on a market of smaller app makers but the password manager industry has left me with little sympathy. Years ago I bought 1Password via a one off payment and set it up to sync via my iCloud Drive. It all worked great. Then they took VC investment and quickly every new feature was locked behind a subscription gate. I switched to Bitwarden. Then they took VC…
Apple is one of the few entities I'd trust for password management. Besides relying on them not being breached, devices I physically have make for good auth mechanisms. It's the one thing I really don't want to deal with a third party for. Irks me a bit how Apple knows this. And it's not that big a deal to occasionally copy a password onto a Linux or Windows device, or better yet, use the iPhone to authenticate for i…
There’s stories of SIM swap just leaving the door wide open though
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#716Earlier quoted context omitted.
Shouldn't conflict resolution be in the program itself? It should ask me what to do and be able to keep both versions of the conflicting entry. And if I answer "keep both" or defer to later then it should pack both into the vault and upload that. (Also I didn't mean thousands of free services, I meant that each one will give you thousands of megabytes for free. Honestly just google and microsoft accounts, and icloud…
(sorry about my misleading playful paraphrasing) The program itself might not get information efficiently to do conflict resolution (or not at all): for example, you edit a file offline and sync, Dropbox and friends wouldn't be smart enough to just append both of a few bytes worth of data that a password-manager controlled service could since it would be aware of the data structure but would just dump both files, and…
> Though maybe this is not an issue as you mention some of the keepass-based apps that go the "app-sync" route instead of manually placed file?
Right, my main concern here is programs that talk directly to the service's API, because that's the easiest to implement in a correct way. Dumb file storage, but without the worry of stale versions appearing.
Though most people don't need their vault to be robust against simultaneous offline edits from multiple devices.
> (also I think it's more than a sub-Mb, you have icons there, but also images of docs and what not)
I have usernames/urls/passwords, some notes, some icons, and some ssh and bitlocker key files. In total it's 159KB, including a bunch of version history and the recycle bin.
What kind of documents would I put in a password file?
Though some extra megabytes don't really affect my argument much.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#717Earlier quoted context omitted.
But have you thought to ask why that is? The general mechanism for free software to be developed is for the individual users to make modifications. Not all of them, of course, but the ones who know how to. Someone sees something wrong, fixes it. Apple interferes with this. If you don't like an app on your iPhone, even if it's open source, you can't just make a minor change because for that you have to pay $100/year a…
Well that's all fun and games until you start putting off paying Internet bill for two weeks because it turns out that you misconfigured your password app and it actually didn't save your password to the utility service provider and you realize you have no internet one day and you have a school assignment ugh and maybe your credit score gets 0.5% lower and yeah it's all very much your fault. "But you can just be more…
> Well that's all fun and games until you start putting off paying Internet bill for two weeks because it turns out that you misconfigured your password app and it actually didn't save your password to the utility service provider
As opposed to the centralized service that will kindly misconfigure it for you, or just discontinue it out from under you, or ban you because of a false positive, or ban you because of a true positive because you unwittingly violated their broad and ambiguous terms but you're still just as screwed.
> I believe this whole Apple vs Linux debate is perfectly analogous to the West vs East Germany debate, to the point that almost all intuitions/arguments for the latter are perfectly reusable in the former
The fallacy of Soviet Communism was the fallacy of central planning. The Party decides what's good for you and The Party is infallible so if you try to resist you'll be punished. Freedom of choice is heresy. Divergence is verboten.
Does that sound to you like the typical Linux user, or like Apple?
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#718Earlier quoted context omitted.
Ok so let's assume passkeys are a form of saved generated password. > 1. They are highly phishing resistant. Unlike passwords and popular forms of 2FA (TOTP and SMS), users can’t be tricked into sending their credential to a fake/malicious server. A passkey is bound to the server domain at the time the credential is created, and your OS/browser will simply not send it to the wrong place. So why does my browser or pas…
> So why does my browser or password manager send saved normal passwords to a different domain than the one they were saved for? This is not a limitation of passwords but of the software that encourages saving passwords. It didn't need switching to machine only passwords to fix. Any kind of authentication method that relies on a string that can possibly be manually typed into a box by an end-user can never be made to…
> You could just go through the account recovery flow for the airline app to regain access to your account.
On which device? You can't use a public pc (or a local friend's) because you'd need to get your new passkeys on it and that's not safe.
Buy a new laptop/phone on the spot?
I'm going to make up a new conspiracy theory that says this push for passkeys is there to sell more devices, because shared devices aren't safe any more.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#719Earlier quoted context omitted.
Keepassxc has zero collaborative features and no online sync. I’m a big fan of keepassxc but these reasons are why I pay for 1P. I can add colleagues, guests, family members and have it run on all my devices.
I would instead jokingly say that you would have to pay me to use 1Password. KeepassXC does have collaborative features and online sync if you just drop the Keepass file in a shared cloud - I use it this way and it's easy to set up. Also, more importantly, the password database is not stored in some server God knows where.
> Also, more importantly, the password database is not stored in some server God knows where.
Well..
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#720Earlier quoted context omitted.
I still use 1Password 7
Yup. Wish I could go back to 6 because 7 feels noticeable slower, but 8 is a non-starter due to the lack of self-hosting or local vault options. I also hate how a bunch of "babysitting" features are forced on you in later (after 5 or so) 1Password releases. I don't want Watchtower to be pegged to the top of the sidebar - but there it is anyways. I don't want to set a password hint for the master password, but I'm for…
Yeah, Watchtower is horrible, also search is sometimes really bad when you have a lot of different logins for the same domain