1Password for Mac Gets Updated with 30 New Features, 1Password Mini Item Editing

[till213]

That article isn't about random word passwords, that's about passphrases, which are a horrible idea. Random word passwords are still extremely secure.

From that very article:

"The so-called dictionary attacks he mounted using lists of more than 20 million passwords culled from previous website hacks had worked well. Augmented with programming rules that substituted letters for numbers or combined two or more words in his lists, his attacks revealed Stratfor passwords such as "pinkyandthebrain," "pithecanthropus," and "moonlightshadow."

Now while combining 4 completely random words certainly adds more security than trying to s\/bst1t\/t3 l3tt3rs, I doubt that many people will come up with 4 completely random words, or those words will be picked from a very limited pool of words.

So creating rules for attacking "common word combinations" of up to 4 words - including permutations, spaces, Capitalisation - is probably already a reality.

Granted, if you really choose completely independent and obscure words then you might have some extra security - but you'd still need to type them in wherever you log in - in my case a task elegantly done by my password manager. And I have far more trust in a 32 character password "consisting of ASCII garbage art" than 4 "random" words...

 

[aziatiklover]

You can see in the video here that we are in fact updating it:

http://vimeo.com/88901304

Hope that helps clarify things a bit.

I see thanx, but still no specific time frame. I will redownload it once it gets ios 7 update.

 

[AGKyle]

I think it has been discussed in your forums already, and the consensus was IIRC that "as soon Wifi sync between mobile - desktop was working, then we tackle Wifi sync between desktops".

It's not like I don't trust Dropbox or Apple - but will all this valuable data they become more and more a desirable target for hackers I am afraid.

(And I don't trust my Master Password to hold very long against an automated attack, even though it is still pretty long )

So I am trying to minimise the risks and NOT putting out my password keychain "out there".



That's exactly how I do it Unfortunately that wakes up my NAS (which is "sleeping" most of the time) each time I login into my Mac (OS X seems to remember the login credentials when 1password accesses that shared folder location, which is great - but I don't change/add my passwords that often, so an explicit "Wifi sync" once in a while would fit better in my use case.

Thanks for your reply

As with all things in life, priorities change and are constantly in flux. Wifi sync works for a vast majority of our users, who are just looking for syncing to iOS devices. Everyone has a feature that they want. We try to base our list on what is in the most demand. Otherwise we get overwhelmed in our support areas by requests and repeat issues that might not necessarily be easy to fix for the user.

We also work in phases, we work on the Mac app, release it, work on the iOS app, release it. We have some developers who focus primarily on their platform (iOS or Mac) and some that rotate. Right now the focus (priority) is getting multiple vaults and the iOS 7 interface changes out.

I'm not sure what bigger features are planned for the 4.3 Mac app and the 4.6 iOS app. But it's possible that the wifi sync between desktops might be in that. It would also be great if this worked with Windows. As you can imagine there are a lot of moving parts.

I've passed your feedback along to the developers, but I do ask for patience while we work through issues that our support team is seeing the most of.

I do apologize for any delays though. This is why we rarely provide dates or timeframes for releases

----------

I see thanx, but still no specific time frame. I will redownload it once it gets ios 7 update.

Correct, we never give timeframes or release dates until the application is ready. Basically, those come in the form of hints from our developers on Twitter when a particular release has been submitted to Apple for review.

It's far too easy to say "we'll release this month" and then miss it because some unforeseen problem came up that needed immediate attention. I know this doesn't make everyone happy but we've lived and learned from past experience with this. The phrase "under promise and over deliver" holds a lot of ground for us.

Sorry for the lack of additional information though!

 

[Rich2Putt]

I purchased both 1 Password for OSX & iOS. The price is steep but it's been working great between the Mac, iPhone & iPad.

You can try a free 30 day trial on their web site and take it for a spin.

I have had no regrets buying it. As an FYI, they returned answers to my questions with-in 24hrs. Good support.

 

[cdembek]

Still waiting for the update via the app store!

In the future, perhaps don't announce the release until it is approved in the app store.

 

[MikhailT]

Still waiting for the update via the app store!

In the future, perhaps don't announce the release until it is approved in the app store.

The update is out for the webstore version, it's been available since the 14th.

Unlike some companies, AgileBits is not going to wait for Apple to approve the update before they release the website version. There's nothing they can do to speed up the review process.

It might actually help to have some # of the population using the latest version to catch anything weird before the MAS update goes live.

 

[cdembek]

So if you purchased via the app store, we have to continue to wait?

 

[porthole2]

I'm glad you asked that! [Disclosure: I work for AgileBits]

A Diceware-like generator is available in the 1Password for Windows beta, but we can't make any promises about when this will be brought to Mac and other platforms. For the time being, the "pronounceable" recipe in 1Password's Strong Password Generator is your best bet at getting strong, memorable passwords.

When looking into the whole password thing I came across the Diceware method a while ago. One thing I picked up somewhere that even using the Diceware method it is not that secure if you let random number generators pick the die numbers rather then a true "roll of the dice"

How does that logic relate to 1PW auto generating?

[Disclosure: I work for AgileBits, the makers of 1Password]

This is an extremely important and fair question. We live in a time when governments are coercing "industry partners" to provide access to private user data and for deliberately weakening security tools. I know that we are good guys and would not do anything like that, but you are not in a position to simply take my word for that.

The ATF raid on Ares Armor despite a court order granting a restraining order against the feds is a prime example of abuse.

Some of us are old school and don't use Twiiter.

Or facebunk

 

[porthole2]

Agilebits offer 30 day trials, you can download the OS X version here: http://agilebits.com/downloads

As part of their 30 day money back, you can buy the iOS app and ask for a refund within 30 days if you're not happy: https://agilebits.com/home/money_back_guarantee

Yes, you still have to purchase a license for each platform.

50$ is a one-time fee for the 1Password 4 for Mac license, meaning that you never have to pay again unless you wish to upgrade to 1Password 5 for Mac. It'll cover all of your Macs, meaning if you have 10 Macs that you own, you can use the same single-user license on all of them without paying again.

Considering 1Password 3 was updated for 3 years with hundreds of free updates, expect the same for 1Password 4 given their track record going back to 1Password 2.

Note they offer bundle license to include Windows as well for 20$ extra at their store only.

For iOS, it's 18$ to cover all of your iOS devices as long as they're running iOS 6 or above.

For many years the utility from PC Magazine's editors "Passcrypt" has worked for me. Still does, but it does have some issues and has not been updated in 5-6 years.
Jumping into the land of IOS 2 years ago had/has me searching for the best PW app. I have tried most of the free ones and have purchased quite a few trying to get one that just works.

Using Roboform now, don't really care for it, but at the time it got the best reviews for cross platform use (Windows and IOS)

I tried 1Password back in December and while 1PW for IOS was discounted to 50% it was my inability to get the Windows browser extensions to work that kept me from downloading it. Tired of paying for stuff that does not work.

With the Windows issue the only answer I got for tech support was "Please remove the version 4 extensions from Firefox and Chrome" (Stefan Agilebits)
Thats it, nothing else.

When writing the next day about the price increase for the IOS version the answer I got was "You are correct, the prices were lower earlier this week" (Sara, Agilebits Minister of magic)

I am now a Mac user after 30+ years of PC usage. So I am back to PW utility searching.
I have !PW for Mac on trial basis to see how it works. But I once again cannot get !PW to work under Windows.

Win 7, Chrome or Firefox I get the following error: "The 1 Password 4 browser extension is not compatible with Windows at this time"

And there is still no Try before you buy" for a relatively pricey IOS APP.

I'm a believer of the logic:
Sell something for $100 and 10 people may buy it
Sell something $10- and 1000 people may buy it.

 

[MikhailT]

So if you purchased via the app store, we have to continue to wait?

Unfortunately, it's true for any Mac or iOS App Store apps. Apple takes a week for the review to finish.

Some company get dinged for making the website version customers wait a few weeks because they wanted to wait for the approval from Apple first, just like what you're saying only in the opposite way.

There is no win-win for anybody here. I'm just saying for 1Password, the website version get released as soon as possible and the MAS versions take a week or two to come out.

....With the Windows issue the only answer I got for tech support was "Please remove the version 4 extensions from Firefox and Chrome" (Stefan Agilebits)

Win 7, Chrome or Firefox I get the following error: "The 1 Password 4 browser extension is not compatible with Windows at this time"

And there is still no Try before you buy" for a relatively pricey IOS APP.

I'm a believer of the logic:
Sell something for $100 and 10 people may buy it
Sell something $10- and 1000 people may buy it.

There is no 1Password 4 for Windows yet, so you cannot use 1Password 4 extension on Windows. I experienced the same thing as you did but I installed 1Password 3 extensions with no problems on Windows. I just have to disable 1Password 4 extension in Chrome on Windows only and enable the 1Password 3 extension instead.

Make sure you do not install the same extension as the Mac. 1Password's Preferences > Browsers on Windows will give you the right extension.

 

[porthole2]

There is no 1Password 4 for Windows yet, so you cannot use 1Password 4 extension on Windows. I experienced the same thing as you did but I installed 1Password 3 extensions with no problems on Windows. I just have to disable 1Password 4 extension in Chrome on Windows only and enable the 1Password 3 extension instead.

Make sure you do not install the same extension as the Mac. 1Password's Preferences > Browsers on Windows will give you the right extension.

So with some email help I think I found my issue. I am using OSX and Win 7. I thought that my browsers being operating system specific that 1 Password would be as well. But, with the plugin i was getting the error.

So while I do indeed have separate 1Password for Mac and Windows (trial basis yet) apparently the plugin that is within 1 Password is the issue, and they are working on a compatible version.

 

[cdembek]

Any updates? Did the app get rejected?

 

[BulkHedd]

Any updates? Did the app get rejected?

It's been nearly 2 weeks and still no update in the Mac App Store. What's going on?

 

[chrfr]

It's been nearly 2 weeks and still no update in the Mac App Store. What's going on?

https://twitter.com/1Password/status/448146934763515904

They will be sending a newer version to the App Store after some bugs are fixed, it appears.

 

[cdembek]

It's been nearly 2 weeks and still no update in the Mac App Store. What's going on?

Wondering the same thing... tired of the typical "blame it on the app store approval" response.


For the folks that have upgraded the desktop version of 1password 4.2, the following statement would make me concerned. Is the desktop update a beta version for testing?

It might actually help to have some # of the population using the latest version to catch anything weird before the MAS update goes live.

----------

https://twitter.com/1Password/status/448146934763515904

They will be sending a newer version to the App Store after some bugs are fixed, it appears.

And yet no updated from them here. I will be starting to look for a new password manager.

 

[freelancing]

can it work like Windows KeePass on USB drives?

My husband is a PC (yes, a mixed marriage) - he uses KeePass on a USB drive for all his passwords - so he can have them wherever he goes w/o relying on the cloud. I like the appeal of that. Will 1password do that as well?

 

[cdembek]

Release must of had a bunch of bugs.... still waiting for the update.

 

[SVT Amateur]

So will the App Store version get updated? It appears y'all are beta testing 4.3 but can the App Store users at least get 4.2.2 since it has been out almost a month now?

 

[dugbug]

My husband is a PC (yes, a mixed marriage) - he uses KeePass on a USB drive for all his passwords - so he can have them wherever he goes w/o relying on the cloud. I like the appeal of that. Will 1password do that as well?

yes in 4.3 which is in beta. The current version supports local wifi sync.

I can't speak for the windows version of 1password though. I purged windows from my household and there was much rejoicing.

 

[AGKyle]

So with some email help I think I found my issue. I am using OSX and Win 7. I thought that my browsers being operating system specific that 1 Password would be as well. But, with the plugin i was getting the error.

So while I do indeed have separate 1Password for Mac and Windows (trial basis yet) apparently the plugin that is within 1 Password is the issue, and they are working on a compatible version.

Glad to hear you got some help via email support! If you're still having trouble please let me know via private message.

Any updates? Did the app get rejected?

It's been nearly 2 weeks and still no update in the Mac App Store. What's going on?

https://twitter.com/1Password/status/448146934763515904

They will be sending a newer version to the App Store after some bugs are fixed, it appears.

We had some usability issues that would've caused users to be confused by what was happening and it could possibly cause users to have two vaults merged that they didn't intend to merge. We made a number of big improvements here to make this far more straight forward and understandable. Some of the improvements we have made require the iOS version of the application that is due for an update as well.

We plan to send both in for review and have them released at the same time. Hopefully that will happen soon.

There will be a blog post about this coming soon that explains in far more detail why we didn't issue a Mac App Store update. Needless to say, it's for the best and our Mac App Store users will have an update in the not too distant future.

I do apologize for the inconvenience this may have caused.

Wondering the same thing... tired of the typical "blame it on the app store approval" response.


For the folks that have upgraded the desktop version of 1password 4.2, the following statement would make me concerned. Is the desktop update a beta version for testing?



----------



And yet no updated from them here. I will be starting to look for a new password manager.

Please understand that this is not an official AgileBits support forum. While I do my best to respond here, a vast bulk of my time is spent helping customer's via email support. If you ever have questions and aren't getting an answer here you should certainly email us. The email is on the page in my signature.

The website version is not a beta for testing. It's a stable release. However, there are a number of changes we'll be making to the 4.3 release (which is the next version for both MAS and website) that require the 4.5 version for iOS as well. This has held up the 4.3 release from being released at this time.

We'll be issuing both soon. There is nothing fundamentally wrong with the current MAS release and users should not feel as though they are missing out on anything from this release. There were improvements and bug fixes, but nothing major that will interrupt MAS users by not having the update.

I am sorry for the delayed response and I am sorry that we haven't yet issued a Mac App Store update. As a Mac App Store user, you are welcome to install the website version of the application for free and migrate your data. The MAS version will actually apply a license to the website version so you do not need to purchase it separately (this cannot happen in reverse). So, if you really want the 4.2 release, you can get it by migrating. I'd be happy to help with that if you wish, just private message me.

Release must of had a bunch of bugs.... still waiting for the update.

No, not a bunch of bugs. It had some usability issues, as discussed above. If you have questions please let me know.

My husband is a PC (yes, a mixed marriage) - he uses KeePass on a USB drive for all his passwords - so he can have them wherever he goes w/o relying on the cloud. I like the appeal of that. Will 1password do that as well?

We have a Mac and Windows version of the application, so you can certainly use the application on both if you purchase a license (Mac+Windows bundle, available on our website. This includes a free update to 1Password 4 for Windows when it's released in the future as well).

So will the App Store version get updated? It appears y'all are beta testing 4.3 but can the App Store users at least get 4.2.2 since it has been out almost a month now?

See above please. If you have questions please let me know.

 

[cdembek]

We plan to send both in for review and have them released at the same time. Hopefully that will happen soon.

FYI.. it was a month ago you announced 4.2...

There will be a blog post about this coming soon that explains in far more detail why we didn't issue a Mac App Store update.

Is there any way we can convert back to the web version without shelling out more $$??

The website version is not a beta for testing. It's a stable release. However, there are a number of changes we'll be making to the 4.3 release (which is the next version for both MAS and website) that require the 4.5 version for iOS as well. This has held up the 4.3 release from being released at this time.

If the website version is a stable release, push it out for the MAS folks, or allow us to update.

We'll be issuing both soon. There is nothing fundamentally wrong with the current MAS release and users should not feel as though they are missing out on anything from this release. There were improvements and bug fixes, but nothing major that will interrupt MAS users by not having the update.

Soon? Really... we are on a month now.

Yea we are not missing out MUCH, just everything below, which I have been waiting for, for a quite some time.

1Password mini
- You can now edit items directly within 1Password mini!
- Edit generated passwords in 1Password mini, too
- Greatly improved URL matching makes logging in to sites with sub domains easy
- Configure URL matching for sub domains in 1Password > Preferences > Browser
- Improved support for multiple Chrome profiles
- By popular request, 1Password mini now shows Secure Notes!
- 1Password mini now supports fuzzy search. For example: "oogle" will now return items named "Google"


I have loved this product for years now, it's been a real help managing logins, however there is NO WAY I would recommend 1Password to anyone now. It would be nice to have the option to update using the website version.

 

[AGKyle]

FYI.. it was a month ago you announced 4.2...



Is there any way we can convert back to the web version without shelling out more $$??




If the website version is a stable release, push it out for the MAS folks, or allow us to update.



Soon? Really... we are on a month now.

Yea we are not missing out MUCH, just everything below, which I have been waiting for, for a quite some time.

1Password mini
- You can now edit items directly within 1Password mini!
- Edit generated passwords in 1Password mini, too
- Greatly improved URL matching makes logging in to sites with sub domains easy
- Configure URL matching for sub domains in 1Password > Preferences > Browser
- Improved support for multiple Chrome profiles
- By popular request, 1Password mini now shows Secure Notes!
- 1Password mini now supports fuzzy search. For example: "oogle" will now return items named "Google"


I have loved this product for years now, it's been a real help managing logins, however there is NO WAY I would recommend 1Password to anyone now. It would be nice to have the option to update using the website version.

You skipped part of my last post, I'll paste it below:

As a Mac App Store user, you are welcome to install the website version of the application for free and migrate your data. The MAS version will actually apply a license to the website version so you do not need to purchase it separately (this cannot happen in reverse). So, if you really want the 4.2 release, you can get it by migrating. I'd be happy to help with that if you wish, just private message me.​

You can use this guide to migrate, if you so choose:

http://learn.agilebits.com/1Password4/Mac/en/KB/mas-web.html

 

[gc916]

1Password on sale

For those who may have missed it, AgileBits has announced a half-price sale on all 1Password versions. I'm not affiliated with the company, but I have been a very satisfied user for a few years.

 

[SVT Amateur]

You skipped part of my last post, I'll paste it below:

As a Mac App Store user, you are welcome to install the website version of the application for free and migrate your data. The MAS version will actually apply a license to the website version so you do not need to purchase it separately (this cannot happen in reverse). So, if you really want the 4.2 release, you can get it by migrating. I'd be happy to help with that if you wish, just private message me.​

You can use this guide to migrate, if you so choose:

http://learn.agilebits.com/1Password4/Mac/en/KB/mas-web.html

Wow! That's awesome. Thanks for the update Kyle and I'll check your blog/twitter feed next time for updates.

I personally prefer the MAS due to sandboxing and easy deleting of the programs I no longer want - and will keep 4.1.2 and just wait for the MAS update. Like you said, this version is great and I don't even know if I would use any of the new features. Thanks again!

 

[AGKyle]

For those who may have missed it, AgileBits has announced a half-price sale on all 1Password versions. I'm not affiliated with the company, but I have been a very satisfied user for a few years.

Thanks for mentioning this before I was able to

/me rubs sleep from his eyes

Wow! That's awesome. Thanks for the update Kyle and I'll check your blog/twitter feed next time for updates.

I personally prefer the MAS due to sandboxing and easy deleting of the programs I no longer want - and will keep 4.1.2 and just wait for the MAS update. Like you said, this version is great and I don't even know if I would use any of the new features. Thanks again!

You're welcome!

There isn't a huge need to jump through hoops for most users, but for those that do want those new features they can by using the instructions. Hopefully that'll let those that want to use them do it and hopefully those that don't need to can wait it out for a little longer while we put the finishing touches on the next round of updates.

We really didn't want it to come down to a delay like this, but sometimes things are just more difficult than they seem from the outside looking in. We'll be posting an explanation to our blog, which I hope to link to in this thread when it's available. It won't be until we've put the 4.3 release in for MAS review, but once it is we'll post that blog update and I'll provide a link here so everyone can read through if they want to understand the details more.

As always, if anyone here has any questions don't hesitate to ask. I'll try to monitor this discussion further, but if I don't respond in a timely fashion please click the link in my signature and send in an email, we are doing all we can to reply to those as quickly as we can.