Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Any thoughts to adding a "check for heartbleed issue" within the app?

And if I read it right, the bundle does not include the IOS version?
 
For those who may have missed it, AgileBits has announced a half-price sale on all 1Password versions. I'm not affiliated with the company, but I have been a very satisfied user for a few years.

I just got it too and so far it's not bad

Thanks for mentioning this before I was able to :)

/me rubs sleep from his eyes



You're welcome!

There isn't a huge need to jump through hoops for most users, but for those that do want those new features they can by using the instructions. Hopefully that'll let those that want to use them do it and hopefully those that don't need to can wait it out for a little longer while we put the finishing touches on the next round of updates.

We really didn't want it to come down to a delay like this, but sometimes things are just more difficult than they seem from the outside looking in. We'll be posting an explanation to our blog, which I hope to link to in this thread when it's available. It won't be until we've put the 4.3 release in for MAS review, but once it is we'll post that blog update and I'll provide a link here so everyone can read through if they want to understand the details more.

As always, if anyone here has any questions don't hesitate to ask. I'll try to monitor this discussion further, but if I don't respond in a timely fashion please click the link in my signature and send in an email, we are doing all we can to reply to those as quickly as we can.

I got this last night when I learned it was on sale. I am trying it our because I read it's easier to find your passwords. I LOVE the iCloud Keychain, but I hate how it just lists stuff and you have to scroll to find things. Also for some reason my wife’s iPhone will not suggest new passwords and I tried everything. I might get this for her as well since it's basically buy one get one free with this sale.

Now will there even be an easy way to transfer all my iCloud Keychain stuff to 1Password? Sorry for this 2nd question, but is there or will there be a wed version in a sense that I can access all this info logging in on line someplace? So if I don't have my phone or iPad with me, i can go to a website and get this info?
Oh, last question for now, when will an Android verison will be coming out?
 
Last edited:
Any thoughts to adding a "check for heartbleed issue" within the app?

And if I read it right, the bundle does not include the IOS version?

We would love to be able to do something like this, but we have a completely different security model.

We, AgileBits, do not have any access to the list of sites that you store in 1Password. So we can't analyze your data outside of the 1Password program itself. Updating the full 1Password program (as opposed to a browser extension or doing something server-side) is not something that can be done in a few hours.

Quite simply, our security architecture puts your data in a place where only you can access it. There are advantages and disadvantages to each security architecture. We've made what we think is the best choice for our customers' privacy and security, but it does mean that there are times when we can't offer the kinds of services that those with different architectures can.

On another matter, we are concerned about the reliability of the particular advice some sites and services are offering. There are huge uncertainties that even the most sophisticated testing system can't resolve.

1. "(Partially) fixed" or "never vulnerable"?

We can't always distinguish between a site that was never vulnerable and a site that had been vulnerable but has since performed the first state of a fix. There are various clues that we can and do test for, but these aren't always going to be reliable.

Normally it wouldn't matter if we couldn't distinguish between "fixed" and "never vulnerable", but in the case of Heartbleed it does matter because there a second stage needed to completely clean up.

2. Is a site planning on replacing site certificate?

We do not usually know whether a site plans on performing the second, and slow, stage of the fix. Because it may take several days for this second stage to be complete, we don't know if failure to complete it is because it is in progress or because they don't plan to do it.

We are exploring ways to provide useful and *reliable* advice on when and where to change your passwords. And we would also like to make it clear that we are making a "best guess," when applicable.

As for the sale question, you are correct, the bundle does not include the iOS version. We cannot "bundle" the app from the App Store, Apple either requires it be free, or paid. No way to bundle or give it away with purchases from our website.

Keep in mind that the iOS app is full featured, it doesn't prevent you from doing anything at all after having purchased it. Many applications that give you a free app only offer read-only or are a subscription service that get money over a longer period of time in a recurring manner. Just something to keep in mind as you think about bundle/price.

Let me know if that helps!

----------

I just got it too and so far it's not bad



I got this last night when I learned it was on sale. I am trying it our because I read it's easier to find your passwords. I LOVE the iCloud Keychain, but I hate how it just lists stuff and you have to scroll to find things. Also for some reason my wife’s iPhone will not suggest new passwords and I tried everything. I might get this for her as well since it's basically buy one get one free with this sale.

Now will there even be an easy way to transfer all my iCloud Keychain stuff to 1Password? Sorry for this 2nd question, but is there or will there be a wed version in a sense that I can access all this info logging in on line someplace? So if I don't have my phone or iPad with me, i can go to a website and get this info?
Oh, last question for now, when will an Android verison will be coming out?

Welcome to the family! :)

Apple doesn't allow developers access to the items in the Keychain anymore, at least not without a lot of resistance along the way. Back in 10.7 they changed things up so that developers could only access items they themselves put into the Keychain, but not what other developers have put in (including Apple's).

The best way to do it is to goto the site on a Mac, with 1Password installed, then have iCloud Keychain enter the username and password. When you log in, 1Password should ask to save it. This will enter all the data in on a case by case basis for each site. Once you have everything, you can just turn iCloud Keychain off if you wish and 1Password takes over for you.

For the online access, you could use 1PasswordAnywhere:

http://learn.agilebits.com/1Password4/iOS/Tutorials/ios-1pa.html

I would hold off on using 1PasswordAnywhere until Heartbleed has been confirmed as no issue on Dropbox. As of writing this they haven't confirmed anything on their blog nor have I seen anything (I could've missed it, it's been a very busy week).

The Android version is in beta now, we'll be giving more information on release in the coming weeks I think. Hang in there, it's sooner rather than later now.
 
After reading all the rave reviews, I just got this today for Mac and iPhone/iPad after seeing it was on sale. I was a bit disappointed it isn't more intuitive and wouldn't import direct from keychain..

I read the reasons listed above as to why that isn't allowed anymore, and understand and appreciate that.

The entire password business remains a bit of a mess though IMO. I don't think there's a perfect solution in terms of security and convenience, which have to be balanced out against each other. There is a natural tension between those two objectives.
 
Welcome to the family! :)

Apple doesn't allow developers access to the items in the Keychain anymore, at least not without a lot of resistance along the way. Back in 10.7 they changed things up so that developers could only access items they themselves put into the Keychain, but not what other developers have put in (including Apple's).

The best way to do it is to goto the site on a Mac, with 1Password installed, then have iCloud Keychain enter the username and password. When you log in, 1Password should ask to save it. This will enter all the data in on a case by case basis for each site. Once you have everything, you can just turn iCloud Keychain off if you wish and 1Password takes over for you.

For the online access, you could use 1PasswordAnywhere:

http://learn.agilebits.com/1Password4/iOS/Tutorials/ios-1pa.html

I would hold off on using 1PasswordAnywhere until Heartbleed has been confirmed as no issue on Dropbox. As of writing this they haven't confirmed anything on their blog nor have I seen anything (I could've missed it, it's been a very busy week).

The Android version is in beta now, we'll be giving more information on release in the coming weeks I think. Hang in there, it's sooner rather than later now.
Thank you and I have an idea now to transfer stuff, but it will take a while. I don't have this on my Mac, because I really don't use it anymore. I just have it on my iPhone and iPad. Thanks for the info and a friend wants this for her Android so I will keep her posted as well.
After reading all the rave reviews, I just got this today for Mac and iPhone/iPad after seeing it was on sale. I was a bit disappointed it isn't more intuitive and wouldn't import direct from keychain..

I read the reasons listed above as to why that isn't allowed anymore, and understand and appreciate that.

The entire password business remains a bit of a mess though IMO. I don't think there's a perfect solution in terms of security and convenience, which have to be balanced out against each other. There is a natural tension between those two objectives.
I wish I could connect to the keychain as well, but so far I like this. I like its a little more security, all passwords are different (was with iCloud Keychain), but this is more organized. I can add my own stuff, and search for it a lot faster too with this.
 
Anyone use this before? Is it safe to save all password in one place?

It is save to store in one place, IMHO. Been doing it since 1Password's initial release. However, and that is a HUGE however, the app has been continuously degrading its stability and what used to be a SERIOUSLY great app, has turned into something that I don't use anymore.

I have been reporting the bugs, beta tested for them etc etc etc... But the app app keeps degrading.

As of now, I store in via iCloud, which is MUCH more convenient.

If you don't trust or like iCloud, seek other apps than 1Password. It caused nothing but grief !
 
It is save to store in one place, IMHO. Been doing it since 1Password's initial release. However, and that is a HUGE however, the app has been continuously degrading its stability and what used to be a SERIOUSLY great app, has turned into something that I don't use anymore.

I have been reporting the bugs, beta tested for them etc etc etc... But the app app keeps degrading.

As of now, I store in via iCloud, which is MUCH more convenient.

If you don't trust or like iCloud, seek other apps than 1Password. It caused nothing but grief !

What kind of bugs? To say something is degrading but not give examples isn't helpful. I like the iCloud Keychain a lot, but I just can add stuff to it and sorting through all the sites I go in to find to one I need isn't easy.
 
There's a huge learning curve with this system. I just wish they had better and more comprehensive tutorials.

_________________________________________________________________________

It's not that complicated once you delve into it, but it's very procedural. I won't be installing this in a few clicks in one sitting. It's happening organically over time. As web log ins are added, those sites are deleted from keychain.
 
Last edited:
After reading all the rave reviews, I just got this today for Mac and iPhone/iPad after seeing it was on sale. I was a bit disappointed it isn't more intuitive and wouldn't import direct from keychain..

I read the reasons listed above as to why that isn't allowed anymore, and understand and appreciate that.

The entire password business remains a bit of a mess though IMO. I don't think there's a perfect solution in terms of security and convenience, which have to be balanced out against each other. There is a natural tension between those two objectives.

You're very correct. To make things more convenient you often have to make things less secure and vice versa. I think of it like a teeter totter in a lot of ways. We hope that we can provide the options to let users balance it best for their use. If something doesn't quite work in that way for you please let us know!

It is save to store in one place, IMHO. Been doing it since 1Password's initial release. However, and that is a HUGE however, the app has been continuously degrading its stability and what used to be a SERIOUSLY great app, has turned into something that I don't use anymore.

I have been reporting the bugs, beta tested for them etc etc etc... But the app app keeps degrading.

As of now, I store in via iCloud, which is MUCH more convenient.

If you don't trust or like iCloud, seek other apps than 1Password. It caused nothing but grief !

Sorry to hear you've been having trouble. Could you please PM me with examples of what you're having trouble with so that I can look into it? This isn't a common trend that we've been hearing, almost all of our users are far happier with version 4 than they were with version 3, so I'm very curious where you're having trouble exactly so we can look into why.

There's a huge learning curve with this system. I just wish they had better and more comprehensive tutorials.

_________________________________________________________________________

It's not that complicated once you delve into it, but it's very procedural. I won't be installing this in a few clicks in one sitting. It's happening organically over time. As web log ins are added, those sites are deleted from keychain.

We have plans to improve documentation over the coming months. Hopefully that'll make it easier for those who want better documentation. I do apologize for any trouble you're having but please let me know if there is anything I can assist with.
 
There's a huge learning curve with this system. I just wish they had better and more comprehensive tutorials.

_________________________________________________________________________

It's not that complicated once you delve into it, but it's very procedural. I won't be installing this in a few clicks in one sitting. It's happening organically over time. As web log ins are added, those sites are deleted from keychain.

FWIW, I found this link today and watched the about-30-minute video, and found it helpful: http://screencastsonline.wistia.com/medias/f9pww3ftg8

Disclaimer: I've been up for a while and am enjoying a shot of Irish whiskey.
 
You're very correct. To make things more convenient you often have to make things less secure and vice versa. I think of it like a teeter totter in a lot of ways. We hope that we can provide the options to let users balance it best for their use. If something doesn't quite work in that way for you please let us know!
___________________________________________

We have plans to improve documentation over the coming months. Hopefully that'll make it easier for those who want better documentation. I do apologize for any trouble you're having but please let me know if there is anything I can assist with.

Thanks Kyle!

The personal touch is very much appreciated :cool:
 
It is save to store in one place, IMHO. Been doing it since 1Password's initial release. However, and that is a HUGE however, the app has been continuously degrading its stability and what used to be a SERIOUSLY great app, has turned into something that I don't use anymore.

I have been reporting the bugs, beta tested for them etc etc etc... But the app app keeps degrading.

As of now, I store in via iCloud, which is MUCH more convenient.

If you don't trust or like iCloud, seek other apps than 1Password. It caused nothing but grief !
Odd. My experience hasn't been the same. I'll admit that I use 1P on my iPhone much more often than I do on my Mac (which I use a lot less these days) but I haven't encountered any bugs that I can think of in quite a while.

I still think they have the most organized system and the syncing options are wonderful, and more importantly actually work consistently.
 
1password & keychain?

[url=http://cdn.macrumors.com/im/macrumorsthreadlogodarkd.png]Image[/url]


AgileBits today has updated its popular password manager app, 1Password for Mac, to version 4.2, bringing 30 new features, including significant improvements for 1Password Mini, the app's menu bar extension (via Cult of Mac).

Other improvements include refinements to the app's AutoSave functionality, as the app now searches all vaults before asking to save or update Logins and will prompt users to save Logins in their primary vaults by default. Additionally, item editing has been streamlined, allowing users to edit when 1Password locks or quits in the middle of a change as well as the ability to switch vaults while editing.

The update is currently available for download on AgileBits' website, and will be available in the Mac App Store once the update is approved.

1Password for Mac is available in the Mac App Store for $50. [Direct Link]

Article Link: 1Password for Mac Gets Updated with 30 New Features, 1Password Mini Item Editing

How does 1password work w/ keychain - and how do you keep keychain safe, if someone gets into one of your devices, or computer at home - other than 1 password, or pin to open? thanks
 
Thanks Kyle!

The personal touch is very much appreciated :cool:

My pleasure!

FWIW, I found this link today and watched the about-30-minute video, and found it helpful: http://screencastsonline.wistia.com/medias/f9pww3ftg8

Disclaimer: I've been up for a while and am enjoying a shot of Irish whiskey.

This is a fantastic video. Don is a big fan of ours and we were delighted when he made that video free to anyone. It was an incredible thing he did for our users.

How does 1password work w/ keychain - and how do you keep keychain safe, if someone gets into one of your devices, or computer at home - other than 1 password, or pin to open? thanks

We don't really "work" with keychain. No one really can, at least not easily. Back in Mac OS X Lion (10.7) Apple started implementing the sandboxing that the MAS has embraced. In doing this they started removing access to the passwords in Keychain. Applications can store things in Keychain, but only that application can access those items. In this way, 1Password could use Keychain, but it would only be able to access items it put in there.

There exists a script out there that lets user's export their keychain data, but it requires that the user explicitly "allow" every single item that it tries to export. If you have 100 items, it'll ask each time to allow every one of those 100 items. There is no way that 1Password could access those items directly without going through a command line tool that does this. It's kind of a mess.

So, our suggestion to user's is simply this:

If you want to move your data over from Keychain to 1Password, all you have to do is let Safari fill in your usernames and passwords for pages. When you do this and have the 1Password extension installed it will ask to save those items. You can then choose to save it and once you've done so it will be saved in 1Password and will still be in Keychain. You can optionally remove it from Keychain (manually) and then once everything is saved you can disable Safari's auto-fill features. This does take time, but it also lets you organize things how you want. There are definite advantages as well.

Hope that helps explain things a bit more!
 
Where is the mac app store version? This update was over a month ago and nothing is in the app store. Any news or communication?
 
In any case if you have lost your password you can always call the NSA, they probably will have a copy of it. Either through the front- or back door of 1P.

:D

(before the flames start, I am a 1P user on iOS and OSX, but underwhelmed)
 
...just got this today for Mac and iPhone/iPad after seeing it was on sale.

Bummer. I just bought the iOS app a few weeks ago - after sitting on the fence for AGES :(

That said, I'm quite liking it. Much better that all the manual stuff I was doing. I'm logging onto sites I haven't been to for years because I now have the passwords on my ipad.

Just hope it's all secure.
 
Where is the mac app store version? This update was over a month ago and nothing is in the app store. Any news or communication?

We'll be submitting 4.3, the next version soon and along with it a blog post explaining the situation.

Long story short, we found some usability issues that we really wanted to fix. But we only found those after we had rolled it out to the website release version. We have 25,000 beta testers for the Mac, but most of them tend to be advanced users who are savvy with things. Once we released the application though we had some feedback in support that made us realize we had a few issues that needed to be worked out so we pulled the Mac App Store version from review to fix those.

They're fixed now, but we're finishing up a few more things that we've included as well and we should be resubmitting a new version to the Mac App Store soon.

I'll certainly post the blog link in this thread when it appears. We are sorry for the delay, and if you read back to the last page you'll see there are instructions for migrating to the website version from the MAS version if you want to do that instead. If you have questions about it, please PM me.

In any case if you have lost your password you can always call the NSA, they probably will have a copy of it. Either through the front- or back door of 1P.

:D

(before the flames start, I am a 1P user on iOS and OSX, but underwhelmed)

I realize this may be a bit tongue in cheek but I want to make it clear that there are no backdoors in 1Password. Everyone at AgileBits takes security seriously. We don't create our own encryption systems, we use the AES-256 standard and use Apple's cryptography library (on iOS and OS X).

We do not store your data. Therefore the NSA cannot come to us and ask for a user's data. Your data is stored on your computer or devices, and optionally to the cloud (Dropbox or iCloud). Before being sent to a cloud sync service the data is encrypted. This means even if someone does gain access to your iCloud or Dropbox they still need your 1Password Master Password in order to access your 1Password data.

I'm replying seriously here because when someone says something like this, even tongue in cheek, there are people out there who will take your statements seriously and think that there really is a way for that to happen when there isn't.

If you're having trouble with 1Password, or have ideas for ways to improve it, please let me know. If you have security concerns you're welcome to PM me as well, but lets try to avoid any false security statements for the better good of all people reading through here, no one wants to get false information.

Bummer. I just bought the iOS app a few weeks ago - after sitting on the fence for AGES :(

That said, I'm quite liking it. Much better that all the manual stuff I was doing. I'm logging onto sites I haven't been to for years because I now have the passwords on my ipad.

Just hope it's all secure.

Please PM me and I'll see what I can do to help about the pre-sale purchase.

See my reply above about security :)
 
We have 25,000 beta testers for the Mac

but most of them tend to be advanced users who are savvy with things.

I am one of the 25K beta people, but definitely not one of the second group listed :)

I am using Beta versions of Mac, Windows and IOS.

I am curious as to the sale issue. If at the the end of the beta test period do BT's get to purchase at the sale price, or if the odds are that we would purchase it anyway, we would need to do so now to enjoy the price reduction.

Several months ago (around Christmas I think) I tried several password managers. I had a few questions with 1PW and was waiting for answers before purchasing.

The answers came back several days after the sale ended and when I inquired about that I was pretty much told "all sales have to end", too bad.

So I purchased another password manager. I don't mind buying software, if it works. Just don't like buying multiple programs that do the same thing. To that end, I started using 1PW, signed up for the betas and have been using them to the best of my limited ability.

I have had an issue or 2 that I posted about on the blog, and got suggestions, but have been unable to apply yet.

So, do beta testers get rewarded with at least sale pricing for for all the downloads we do :cool:
 
I am one of the 25K beta people, but definitely not one of the second group listed :)

I am using Beta versions of Mac, Windows and IOS.

I am curious as to the sale issue. If at the the end of the beta test period do BT's get to purchase at the sale price, or if the odds are that we would purchase it anyway, we would need to do so now to enjoy the price reduction.

Several months ago (around Christmas I think) I tried several password managers. I had a few questions with 1PW and was waiting for answers before purchasing.

The answers came back several days after the sale ended and when I inquired about that I was pretty much told "all sales have to end", too bad.

So I purchased another password manager. I don't mind buying software, if it works. Just don't like buying multiple programs that do the same thing. To that end, I started using 1PW, signed up for the betas and have been using them to the best of my limited ability.

I have had an issue or 2 that I posted about on the blog, and got suggestions, but have been unable to apply yet.

So, do beta testers get rewarded with at least sale pricing for for all the downloads we do :cool:

At the end of the beta period, if you want to continue using 1Password you will need to purchase the application. Beta testers agreed to no form of payment when they applied to beta test. It was more or less out of the goodness of your heart that you would test it out. It does give you access to things more quickly and you get a chance to provide testing to make the application as stable and reliable as possible.

While we could possibly give you a discount on the Mac version from our website, there is no way to discount or coupon anything via the MAS or App Store. So if you want the discount on the MAS or App Store (iOS) version you need to get it while it's on sale.

As for the Christmas sale, that's unfortunate, it's really hard for our team when we put 1Password on sale. Our support team is around 25 people now but when the application goes on sale we get hit incredibly hard with support requests. They do have to end or we'll never catch up sometimes. I do apologize for that situation though. Someone should've at least offered to discount the Mac application for you from our website, as we can provide coupons for that. It's not possible on MAS or App Store, Apple doesn't make them available. We either put the app on sale for everyone, or no one, there's no middle ground.

If you have more questions please don't hesitate to PM me.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.