Earlier quoted context omitted.
yep, incredibly convenient. big reason i use safari as the default on my MacBook too. honestly safari is great these days for everything except web3.
why except web3？
I use metamask and safari is not supported.
Apple unveils 'Passwords' manager app at WWDC 2024
731–740 of 767 posts
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#732Earlier quoted context omitted.
Main thing is iPhones get security updates for about 8 years. My iPhone 6S is still fine. Pixel in particular will now get 7 years, but this wasn't the case in the past. Random other Android phones don't have good support, and even third-party repairs might be harder.
That's a fair point, and the 6s is a great piece of hardware imo. I just find it frustrating that after security updates stop for my mac, I can definitely keep using software that's always worked on it, supposing I have the executable and any third-party backend services are still running. On my old iPad 3, since the App Store is the central software distributor, more and more apps have been pulled off of it at the d…
For reasons like this, I've never owned an iPad. Seems like an intentionally gimped version of a PC.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#733Earlier quoted context omitted.
> actively prevent pasting a password. I will NEVER understand this one. Do they want me to pick a shitty password? I'm not gong to type a string of of 20 mixed-case and special characters into a private text box on my phone. It always takes 3 or 4 tries to even get it right.
An alphanumeric password doesn't have to be bad or hard to remember. Mixed case and symbols don't add much security. But still, should be paste-able.
The problem is that I always generate a strong password with KeePassXC on my laptop, and I don't know about how bad the mobile sign in experience is until it's too late. And many systems require mixed case and/or special characters, so my password generator is configured to add these by default.
This user-hostile UX decision is simply unjustifiable. It's baffling how this even gets past code review.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#734Normally I’m conflicted when a big tech company comes to stomp on a market of smaller app makers but the password manager industry has left me with little sympathy. Years ago I bought 1Password via a one off payment and set it up to sync via my iCloud Drive. It all worked great. Then they took VC investment and quickly every new feature was locked behind a subscription gate. I switched to Bitwarden. Then they took VC…
Did you ever look into KeePass? The solution you're looking for already sort of exists, several more than decent apps which offer lifetime one-time purchases. Not sure what else to tell you. Keychain/"Passwords" is way too obfuscated and user-unfriendly and hostile to data portabillity to the extent I could never trust or rely on it.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#735I want to use this, but this post gave me pause: https://x.com/blader/status/1800263787746066646 "apple sherlocked 1Password today, so i'd like to remind you that your Apple ID is only as secure as your carrier. if you have 2FA on and get SIM swapped, attackers can lock you out of it PERMANENTLY. last month it happened to me. make sure it doesn't happen to you: " Getting locked out of all my passwords would be pretty…
You can add security keys as a 2FA method and it will disable use of the trusted phone number for authentication
What happens if you have the RecoveryKey set, like the actual generated Recovery code? If that's set, can you always reestablish access?
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#736Earlier quoted context omitted.
keepassxc is incredible, truly slept on. I use safari keychain as well, as a copy. But my master store is keepass. It boggles my mind that people pay for 1password. Btw, is keepassxc on Android now or are you referring to one of the many Android keepass apps? I use keepassium on iOS. I pay for protonmail and also store a copy in protonpass. Proton pass has a nice web interface and doesn’t require me to copy a keepass…
> It boggles my mind that people pay for 1password. I’ve payed for 1Password for 4 years and am a happy customer. But I would also be willing to try KeepassXC if it really offers feature parity. These are some features important to me, are they supported by KeePassXC? - Easy password sharing with my wife. We have separate private vaults and a shared vault, and moving a passwords between these vaults is seamless. - Sy…
> - Easy password sharing with my wife. We have separate private vaults and a shared vault, and moving a passwords between these vaults is seamless.
Not sure about this one. I don't even collaborate passwords in Apple keychain with my own family.
> - Sync has been seamless for years. I don’t have to worry about e.g. iCloud corrupting my password database and having to restore from off-site backups.
Sync with iCloud Drive, Dropbox, Google Drive have been fine for a long time. Plus theres also the option to just keep a password database copy handy.
> - Integration with many platforms. Currently, that means autofilling/autosaving/generating passwords in common browsers, on MacOS, and on iOS.
KeePass is usable on more platforms than 1Password sorry. You could probably get one keepass app or another running on some ancient power PC box running netbsd..
> - Generating and filling TOTP tokens (no need for Google Authenticator or similar apps).
KeePassXC does this
> - Storing and syncing SSH certificates, including acting as an SSH agent (so I have to scan my fingerprint to allow a new SSH authentication).
I have not tried this one, but would be surprised if KeePassXC doesn't do this as well
> - Storing non-password items in the encrypted store, e.g. pictures of passports.
KeePassXC definitely does notes, not sure about photos etc. This is definitely the realm of an encrypted Apple Note for me though.
> - TouchID or FaceID for quick unlocking with everyday use.
KeePassXC has this on Mac, KeePassium does it on iOS really well...
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#737Earlier quoted context omitted.
keepassxc is incredible, truly slept on. I use safari keychain as well, as a copy. But my master store is keepass. It boggles my mind that people pay for 1password. Btw, is keepassxc on Android now or are you referring to one of the many Android keepass apps? I use keepassium on iOS. I pay for protonmail and also store a copy in protonpass. Proton pass has a nice web interface and doesn’t require me to copy a keepass…
Keepassxc has zero collaborative features and no online sync. I’m a big fan of keepassxc but these reasons are why I pay for 1P. I can add colleagues, guests, family members and have it run on all my devices.
> Keepassxc has zero collaborative features and no online sync.
This is why we use it! Also, it's free. Paying subs for software feels dirty.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#738Earlier quoted context omitted.
> It boggles my mind that people pay for 1password. I’ve payed for 1Password for 4 years and am a happy customer. But I would also be willing to try KeepassXC if it really offers feature parity. These are some features important to me, are they supported by KeePassXC? - Easy password sharing with my wife. We have separate private vaults and a shared vault, and moving a passwords between these vaults is seamless. - Sy…
> - Easy password sharing with my wife. We have separate private vaults and a shared vault, and moving a passwords between these vaults is seamless. Not sure about this one. I don't even collaborate passwords in Apple keychain with my own family. > - Sync has been seamless for years. I don’t have to worry about e.g. iCloud corrupting my password database and having to restore from off-site backups. Sync with iCloud D…
Thanks for the detailed reply! :)
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#739Earlier quoted context omitted.
Apple is one of the few entities I'd trust for password management. Besides relying on them not being breached, devices I physically have make for good auth mechanisms. It's the one thing I really don't want to deal with a third party for. Irks me a bit how Apple knows this. And it's not that big a deal to occasionally copy a password onto a Linux or Windows device, or better yet, use the iPhone to authenticate for i…
There’s stories of SIM swap just leaving the door wide open though
I haven't seen those, but it wouldn't surprise me.
Re: Apple unveils 'Passwords' manager app at WWDC 2024
#740Earlier quoted context omitted.
I'm not sure a password database is a 'online bodyguard'. I am sure that 1password has been going downhill for a few years now. Getting rid of the ability for me to manage my own vault was the last straw for me. I'm still limping along with 1password7 with a local vault for my 'important/sensitive' passwords but i let keychain manage most of my randomass website passwords. Since I'm primarily in the apple ecosystem t…
If you're using a version of 1Password that's several years old and no longer updated, and also splitting your passwords across two solutions, one of which is not accessible on all your devices, I'm not too surprised that you don't enjoy the experience. The current version of 1Password is pretty much seamless for me across Linux, Mac, and iPhone. It's more seamless than it ever was before, honestly. It works for my t…
Keychain is accessible across all my devices, excepting a couple of local linux servers, but since I only access them through terminals from my mac.. shrug
What initially attracted me to 1password was certainly it's browser integration features but after switching to keychain I find the 1password save login/autofill interfaces to be clunky and jarring... and the input/search interface. Those features would be hard for me to write myself, however given that 1password when they killed local vaults also switched to a resource hogging cross platform framework (electron) for it's 'native apps' at the same time.. well two straws that broke my back in that case.
My current 1password vault probably has a dozen entries, I've considered moving them to just an encrypted (doubly encrypted I guess) note inside keychain for break glass emergencies.