Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Question to 1Password users -

I bought 1Password about a year ago to easily save my website username and passwords, and credit card info, across devices.

Now that Apple has iCloud Keychain that saves usernames and passwords to Safari, and it can also save credit card info, and with Touch ID integration, I haven't used 1Password anymore.

Am I missing a certain use? Because this app seems to have remained popular. Or is it trusting 1Password more than Apple? That's a legitimate reason, but I am trying to find out if there is something more. Thanks.
 
Question to 1Password users -

I bought 1Password about a year ago to easily save my website username and passwords, and credit card info, across devices.

Now that Apple has iCloud Keychain that saves usernames and passwords to Safari, and it can also save credit card info, and with Touch ID integration, I haven't used 1Password anymore.

Am I missing a certain use? Because this app seems to have remained popular. Or is it trusting 1Password more than Apple? That's a legitimate reason, but I am trying to find out if there is something more. Thanks.

I suppose you could compare 1Password and iCloud Keychain analogously to Microsoft Office and iWork. All cover the basics if that is what you need, but the former are far more sophisticated and powerful than the latter.

I use 1Password to manage all my accounts. I’ve added all the logins, software licences, banking details, Wi-Fi passwords, encryption keys (hard drives, FileVault, etc.), and other kind of secure data to 1Password and use it to manage everything, not just my website logins. It’s just a very powerful tool to store and organise your data. I use the security audits to check whether I should update my passwords and I’ve become a big fan of tagging and smart folders to arrange everything.
 
I suppose you could compare 1Password and iCloud Keychain analogously to Microsoft Office and iWork. All cover the basics if that is what you need, but the former are far more sophisticated and powerful than the latter.

I use 1Password to manage all my accounts. I’ve added all the logins, software licences, banking details, Wi-Fi passwords, encryption keys (hard drives, FileVault, etc.), and other kind of secure data to 1Password and use it to manage everything, not just my website logins. It’s just a very powerful tool to store and organise your data. I use the security audits to check whether I should update my passwords and I’ve become a big fan of tagging and smart folders to arrange everything.

Thanks, very informative.
 
Of course, LastPass stores on its servers nothing but a bunch of encrypted gobbledygook. Without the master password, nothing short of a massive computer form would ever make sense of that data, so really the LastPass stuff is quite secure.

How secure? LastPass can't break into it and they are storing it.

I'm not saying WiFi syncing isn't a feature, but it sure seems like one most people would never think twice about considering important.

Perhaps. But for some users like me who can't use cloud solutions on the network at their place of business by policy, it's great.
 
1Password looks interesting, but I'll wait for the next sale. I can afford Mac/Windows/iOS right now, it can get pretty expensive. :\

Yeah, the only complaint I have is that when I bought the Mac version, I foolishly thought that I was buying the "desktop" version and that I would get a PC license as well. After paying for iPhone and Mac, I decided that for those times when I was on the PC I would have to pull out my phone and laboriously type the strong passwords in.

I can understand not wanting 50 people to share a license, but to make someone buy three licenses so that they can access all their personal machines is a little much.

I too will wait until I can get the PC version on sale. Or decide that it's not worth it. Don't know which yet.
 
I am running both lastpass and 1password. I am running 1password on my iphone and like it a lot, I have all of my info in there. I am running lastpass on my computer and iphone as I came across a deal for a year and a half of a year (stackable to a year and a half) free. I prefer 1password though and if I could afford it on the computer I would only run it, but I don't see that happening any time soon. I keep hoping for some kind of deal or give away on a family pc/mac license. It's a great program but it's 1st world prices.
 
Yeah, the only complaint I have is that when I bought the Mac version, I foolishly thought that I was buying the "desktop" version and that I would get a PC license as well. After paying for iPhone and Mac, I decided that for those times when I was on the PC I would have to pull out my phone and laboriously type the strong passwords in.

I can understand not wanting 50 people to share a license, but to make someone buy three licenses so that they can access all their personal machines is a little much.

I too will wait until I can get the PC version on sale. Or decide that it's not worth it. Don't know which yet.

Two weeks ago, you could get the Mac & Windows bundle for $48.00 Now, it is back to regular pricing of $69.00.

I wouldn't be surprised, if we see a short sale happen with the release of Yosemite.
 
Touch ID is not working for me at all, anyone else having this issue? I made sure it was enabled in settings > security... I tried flipping it off and back on, closed the app... But still only have the option to type my password when launching or when locking.

Tapping "Lock Now" in the Security settings will always require that you type in your master password. It's outlined here:

https://guides.agilebits.com/1password-ios/5/en/topic/settings-security

Some of the other settings on that page may still apply to pre-5.1 update.

You'll also have to type in your master password on fresh restart of the device. If you have Lock on Exit enabled then you should just have to leave the application and goto another application, then come back. It should ask for your master password.

Does that help clarify things?

Really happy with this update and 1Password in general. I use it on all my Macs and iOS devices and for me it's absolutely the most valuable 3rd party app, period. I can't imagine working without 1Password and the continued improvements are very appreciated!

Love this app, it contains my life and business on it!

:cool: Thanks for letting us store your valuable data you two! I hope we can continue to impress!

So is the really tiny text only on the ip6+? Liked it till the update but now most text is unreadable tiny.

Is it any different than other applications that are designed for the 6+? Many of your apps may be scaled up from 5s sizes.

Text looks fine to me. I like being able to see more, hence why I have a bigger screen in the first place.

You'll probably be pretty happy with some upcoming 6+ changes soon, too :)

I don't really get how to use it. If I'm gonna use their passwords am I going to have to reset the password on everyone of my logins in every website? And then to use the sites not on my phone I have to buy the £30 app on my Mac?

That is correct. The goal of a password manager is to store your passwords, but the biggest trouble most people run into is they use the same password for multiple (or all) sites. Take for instance the latest news that JPMorgan Chase had a break in online. In this case they did say that they do not believe any usernames and passwords were accessed lets assume they did have that happen. If you used the same password as part of your Chase account (assuming you had one) you'd have to go change all of your accounts to a new password.

If you use a password manager you use separate unique passwords for every site. This means that when a site has an issue (it happens, thousands of times every year) you only have to change the password for that site and you protect yourself from those types of issues.

It's certainly more work up front, but once done you more or less only have to maintain it as needed. Even Apple is pushing this with iCloud Keychain, if they built it into Safari it's pretty clear that even they think this is the best way to go. 1Password is simply a cross platform, power user friendly solution to the problem of managing and storing hundreds (or thousands) of unique passwords.

I'm happy to work with you if you have any other questions!

----------

Question to 1Password users -

I bought 1Password about a year ago to easily save my website username and passwords, and credit card info, across devices.

Now that Apple has iCloud Keychain that saves usernames and passwords to Safari, and it can also save credit card info, and with Touch ID integration, I haven't used 1Password anymore.

Am I missing a certain use? Because this app seems to have remained popular. Or is it trusting 1Password more than Apple? That's a legitimate reason, but I am trying to find out if there is something more. Thanks.

The below response is good, which you seem to have read already and responded to. But, one of the really great things is that we are cross platform, Mac and iOS are obvious, but we also support Windows and Android. If you're a multi-platform household then iCloud Keychain is only for Apple products.

We also give you options for sync (Dropbox, iCloud, or Wifi). We can store all elements of a credit card and fill all of them. iCloud Keychain cannot fill your CCV code so you have to type it in each time. This is technically a limitation of Keychain, not iCloud Keychain, and a reason we moved away from Apple's keychain as a storage option (we used to support it in 1Password 2).

Third, we support more than just Safari. If you ever need to use Chrome or Firefox? We support those as well :) Or IE on Windows.

I suppose you could compare 1Password and iCloud Keychain analogously to Microsoft Office and iWork. All cover the basics if that is what you need, but the former are far more sophisticated and powerful than the latter.

I use 1Password to manage all my accounts. I’ve added all the logins, software licences, banking details, Wi-Fi passwords, encryption keys (hard drives, FileVault, etc.), and other kind of secure data to 1Password and use it to manage everything, not just my website logins. It’s just a very powerful tool to store and organise your data. I use the security audits to check whether I should update my passwords and I’ve become a big fan of tagging and smart folders to arrange everything.

:cool: Great answer, thanks!

Yeah, the only complaint I have is that when I bought the Mac version, I foolishly thought that I was buying the "desktop" version and that I would get a PC license as well. After paying for iPhone and Mac, I decided that for those times when I was on the PC I would have to pull out my phone and laboriously type the strong passwords in.

I can understand not wanting 50 people to share a license, but to make someone buy three licenses so that they can access all their personal machines is a little much.

I too will wait until I can get the PC version on sale. Or decide that it's not worth it. Don't know which yet.

Well, most users are already saving the cost of the iOS application.

If you purchased from our website you can get a discount on additional licenses here: https://www.agilebits.com/store/upgrade

A single license for Windows would be $25 as an upgrade.

If you purchased from the MAS send us a copy of your receipt (see the contact us link in my signature) and what you're looking to buy and we'll make sure you get the right stuff to get the discounted price.
 
Apps that are updated for the 6 and 6 Plus look brilliant.

I find it funny, AgileBits have rolled out two great updates (versions 5.0 and 5.1) while Facebook haven't even updated their app yet. Pathetic really.

Facebook does periodically push out pointless updates, without disclosing any update details in the release note.
 
Question to 1Password users -

I bought 1Password about a year ago to easily save my website username and passwords, and credit card info, across devices.

Now that Apple has iCloud Keychain that saves usernames and passwords to Safari, and it can also save credit card info, and with Touch ID integration, I haven't used 1Password anymore.

Am I missing a certain use? Because this app seems to have remained popular. Or is it trusting 1Password more than Apple? That's a legitimate reason, but I am trying to find out if there is something more. Thanks.

Someone in another thread put it comparing 1Password and iCloud keychain to Text and Word. For basic stuff, iCloud Keychain is fine, but it doesn't do a lot. iCloud keychain is just that, a keychain. 1Password is a password manager, it manages your password.

I use 1Password because searching for a password is so easy with it. I can store all my password for non-safari stuff too. I can save software licenses, passwords, notes that I don't want others to see, and other things. I can also have it so the info is only on my devises, not on someone's servers like Apple and Lastpass. I use iOS 95% of the time and on iCloud keychain you can't customize the password that it gives you while 1Password I can customize it 100% to what I want. Some websites will take only numbers and letters still in their password, and with iOS iCloud Keychain, this doesn't work well.

The support also doesn't stop after you buy it. I had a lot of questions before and after I got 1Password and always had my questions answered quickly.
 
Last edited:
I recently jumped into 1Password after the mistake with allowing free download of version 4 before the new version came out.

What a lifesaver.

It made updating and storage of all of my passwords to randomly generated garbage very easy. I ended up buying the Mac version for syncing across devices.

One feature that would be nice is for quick selection, or de-selection, of symbols that some websites do not support, right from the password recipe screen. I end up generating a password and replacing the offending symbols with allowable symbols.

Great 6/6+ update. The app looks awesome. Thanks!
 
I have never been interested in 1password because there is no web-based way to get to my information. If I am traveling in another country and lose everything, all I need is a web browser to get any of my login or other information from lastpass (no particular operating system, no permission for installs, etc.)
 
That's what they claim... but it's proprietary code. Only they know that. They developed it, they can crack it.

With 1Password, it's encrypted using their algorithm. And if you choose to sync via iCloud or DropBox, it's synced via a service they have no control over.

LOL! Security much?

iCloud, celebrity hack NSA PRISM anyone?
Dropbox, under the direction of Condoealiza Rice, former NSA.

Steve Gibson of GRC and "Security Now" has taken Lastpass through the gauntlet and has endorsed it. Even when Lastpass was hacked a long time ago, no one's data got compromised. If you use it correctly with dual authentication with GA and trusted devices, it's the most secure thing out there.

----------

1Password has time behind them. They're trusted by many and I would not simply use another password app that seems to be mostly promoted by new members. The iPhone 6 is my first TouchID device and I love not having to type in my 15 character password each time.

Well, in cyber security circles, Lastpass is the most secure password management app. If you actually knew the details around Lastpass you'd might consider it. It was hacked once, and no ones data was was compromised, becauese not even Lastpass has access to the data it stores.

Use what you like, but if you want to be seriously secure, Lastpass wins in every challenge. Sync with iCloud and Dropbox is ridiculously insecure. Celebrity photos much?

----------

AFAIK, LastPass doesn't let you sync multiple devices with Wi-Fi like 1Password does.

Huh? Lastpass is synced with all devices that are logged into Lastpass through any network connection. Obviously haven't used it.

Mac Pro
Mac Book Pro
Mac Mini
Mac Mini Server
iMac
iPad
iPhone

All synced and working with LastPass...

----------

Do you have any objective reasons or is this basically, "I like Pepsi more."

Better security, better architecture, nice UI, has been hacked once and user data was never compromised. Vetted and chosen by professional internet security professionals. Cheap, $1/month for a world class service.

----------

LastPass is a PITA. I prefer 1Password.

I love the update. It looks so much better with 1080p resolution on my Plus. It's a wonder what's taking developers so long to update for higher resolutions, as it stands, most apps look terrible when blownup.

Never had an issue, looks great to me at 1080 and on retina. Most people are too lazy to learn the power user features and are missing out. It works flawless for everywhere, except on mega.co.nz which purposely breaks form fillers.
 
For those that are cloud adverse you have the option of wifi sync, which will be getting even more awesome in the next Mac update (free update for all existing Mac users).

WiFi sync Mac-to-Mac? Is that what you're saying? :)

That would indeed be awesome! Currently I use "folder sync" via my Synology NAS. However that requires my NAS to "wake up" each time I boot into one of my Macs (I access the shared folder via "automount", in case anyone wonders...).

Not a big issue, as I mostly need access to my other files on the NAS most of the time, too. But deferring the automount of my NAS to the point where I actually do need access would be great.

So WiFi sync "Mac-to-Mac" would be very welcome (it is absolutely okay for me that I have to manually sync once in a while, as I already do with iOS-to-Mac).

I absolutely recommend 1password to anyone sensitive about his or her password security!
 
LOL! Security much?

iCloud, celebrity hack NSA PRISM anyone?
Dropbox, under the direction of Condoealiza Rice, former NSA.

It's the usual balance between "security and convenience". 1password does not force - or even endorse - the sync over any cloud service! That is completely up to everyone to decide!

Well, in cyber security circles, Lastpass is the most secure password management app. If you actually knew the details around Lastpass you'd might consider it. It was hacked once, and no ones data was was compromised, becauese not even Lastpass has access to the data it stores.

It was hacked? Data is actually stored there?

Now get this: with my current usage of 1password the AgileBits guys can be hacked as many times as it pleases the hackers. Not only have the AgileBits no access to my data, they do not even store it!

No one stores my encrypted "password safe" but me! On my devices! Under my control!

So the fact that you are saying that the "Lastpass people got hacked, but hey, the hackers could not access the encrypted data" is actually very scary! The hackers most likely now have the encrypted passwords, and who knows when a flaw in the implementation of Lastpass encryption will be found.

It is good to trust in the implementation and the actual encryption algorithm, it is better not to tempt any person to actually try to hack it (by not allowing access at all! Well, my opinion anyway...

Sync with iCloud and Dropbox is ridiculously insecure.

It is actually noteworthy what you say here: on the one hand you admit that Lastpass has been hacked and the hackers got access to the encrypted passwords. There you seem to perfectly trust the encryption and implementation thereof!

On the other hand there is no known case of people having actually hacked iCloud or Dropbox! And NO, the celeb photo case doesn't count, as the passwords and security questions have been guessed!

But even so: on the other hand you don't recognise that the 1password file is also encrypted! And all of a sudden that seems "ridiculously insecure"?

So we have a known case of hacking with Lastpass, and you completely trust their encryption, and we have no known case of hacking into neither iCloud or Dropbox (in order to access 1password files anyway) and all of a sudden that becomes "ridiculously insecure"? Rrrrrright...!

Huh? Lastpass is synced with all devices that are logged into Lastpass through any network connection. Obviously haven't used it.

I haven't used it, I admit. But what you say is a contradiction in itself: so you have to be "logged in into Lastpass" and at the same time "you can sync over any network connection"?

Why do I have to "log in" in order to sync via my LOCAL WiFi network only? Why does Lastpass have to know me when all I want is to move data in my LOCAL network?

Or is it not rather that the sync works VIA the LASTPASS server(s)? Just like "cloud sync"?

Mac Pro
Mac Book Pro
Mac Mini
Mac Mini Server
iMac
iPad
iPhone

All synced and working with LastPass...

What's your point here? Do you want me to enumerate all my devices which are synced among each other with 1password? Synced LOCALLY I should add - no encrypted data ever leaves my own local network! Unlike with Lastpass, as it seems...

----------

Can we use 1Password AND 2-step auth at the same time?

Yes.
 
They developed it, they can crack it.

That's not how cryptography works ;) Off course, assuming that both the AgileBits and the LastPass are "honest people" which put honest effort into getting their encryption algorithms properly implemented - but you always have to TRUST SOMEONE at SOME POINT when it comes to encryption!

Anyway, assuming that neither of them build in willingly "backdoors" such as a "master password" then they cannot "crack" their own encryption algorithm (assuming off course a well-accepted and regardes-as-secure algorithm) - even if they implemented it!

A silly example: let's say that the "encryption" of two numbers was to "multiply" them. So 3 * 4 = 12.

Implementing the multiplication is easy. But even if you know the implementation thereof there is no way you can correctly guess - in the general case - the multiplicands 3 and 4! Could have been 1 and 12. Or 2 and 6. You get the idea.

So even you know about the implementation you cannot "backtrack" from which a given result came from (without additional information such as the password).
 
It is actually noteworthy what you say here: on the one hand you admit that Lastpass has been hacked and the hackers got access to the encrypted passwords. There you seem to perfectly trust the encryption and implementation thereof!

On the other hand there is no known case of people having actually hacked iCloud or Dropbox! And NO, the celeb photo case doesn't count, as the passwords and security questions have been guessed!

But even so: on the other hand you don't recognise that the 1password file is also encrypted! And all of a sudden that seems "ridiculously insecure"?

So we have a known case of hacking with Lastpass, and you completely trust their encryption, and we have no known case of hacking into neither iCloud or Dropbox (in order to access 1password files anyway) and all of a sudden that becomes "ridiculously insecure"? Rrrrrright...!
You spent too much effort on an obvious troll/shill. Not worth it.
 
That's not how cryptography works ;) Off course, assuming that both the AgileBits and the LastPass are "honest people" which put honest effort into getting their encryption algorithms properly implemented - but you always have to TRUST SOMEONE at SOME POINT when it comes to encryption!

Anyway, assuming that neither of them build in willingly "backdoors" such as a "master password" then they cannot "crack" their own encryption algorithm (assuming off course a well-accepted and regardes-as-secure algorithm) - even if they implemented it!

A silly example: let's say that the "encryption" of two numbers was to "multiply" them. So 3 * 4 = 12.

Implementing the multiplication is easy. But even if you know the implementation thereof there is no way you can correctly guess - in the general case - the multiplicands 3 and 4! Could have been 1 and 12. Or 2 and 6. You get the idea.

So even you know about the implementation you cannot "backtrack" from which a given result came from (without additional information such as the password).
I only understand cryptography, but only at a very high level. But this is roughly the analogy I make in my head. Except...

Encryption utilizied is multiplication (aka RSA, blowfish or whatever). I follow here.

The muliplicands are 1. the user data to be encrypted, and 2 the other the user supplied key.... Oh! (Light bulb just went off)

I started typing thinking one of the multiplicands was middleman developer supplied. And then when I started typing it vanished... Nevermind :)

Yes, some level of trust is required. But the likes of NSA and PRISM type programs have shattered that.

As youve pointed out, to do anything with Lastpass you have to authenticate to a remote server... Meaning they keep that, or at least a hash of that key. Not so with Dropbox.

So with that analogy with Lastpass/Dropbox/iCloud.
Multiplication is the encryption method.
User data is a multiplicand.
User password shared as login fir webservice is the other.
 
I have never been interested in 1password because there is no web-based way to get to my information. If I am traveling in another country and lose everything, all I need is a web browser to get any of my login or other information from lastpass (no particular operating system, no permission for installs, etc.)

Yes there is. You can sync using Dropbox and you can access that info from any web browser logging into Dropbox. It's called 1Password anywhere (I think).
 
LOL! Security much?

iCloud, celebrity hack NSA PRISM anyone?
Dropbox, under the direction of Condoealiza Rice, former NSA.

Steve Gibson of GRC and "Security Now" has taken Lastpass through the gauntlet and has endorsed it. Even when Lastpass was hacked a long time ago, no one's data got compromised. If you use it correctly with dual authentication with GA and trusted devices, it's the most secure thing out there.

----------



Well, in cyber security circles, Lastpass is the most secure password management app. If you actually knew the details around Lastpass you'd might consider it. It was hacked once, and no ones data was was compromised, becauese not even Lastpass has access to the data it stores.

Use what you like, but if you want to be seriously secure, Lastpass wins in every challenge. Sync with iCloud and Dropbox is ridiculously insecure. Celebrity photos much?

----------



When I was looking at password managers, Lastpass was hacked. 1Password doesn't store any of you data on their servers. If they get hacked, my info is safe still. I don't care if info was taken on that hack or not, I won't trust them now.

iCloud hacked was user error. They used the 3 question security and they are celebeties.... their questions can be searched on line.

Dropbox,
Condoealiza Rice isn't running it them 100%.
 
Can we use 1Password AND 2-step auth at the same time?

Yuppers. I have two factor setup on iCloud and Dropbox, I'm syncing to Dropbox myself and even with two factor running on Dropbox everything works great.

I have never been interested in 1password because there is no web-based way to get to my information. If I am traveling in another country and lose everything, all I need is a web browser to get any of my login or other information from lastpass (no particular operating system, no permission for installs, etc.)

You should look into 1PasswordAnywhere, it's included free when you sync to Dropbox:

https://guides.agilebits.com/1password-windows/4/en/topic/using-1passwordanywhere

You can also use this locally in Safari on Mac if you turn off Local File Restrictions (develop menu).

WiFi sync Mac-to-Mac? Is that what you're saying? :)

That would indeed be awesome! Currently I use "folder sync" via my Synology NAS. However that requires my NAS to "wake up" each time I boot into one of my Macs (I access the shared folder via "automount", in case anyone wonders...).

Not a big issue, as I mostly need access to my other files on the NAS most of the time, too. But deferring the automount of my NAS to the point where I actually do need access would be great.

So WiFi sync "Mac-to-Mac" would be very welcome (it is absolutely okay for me that I have to manually sync once in a while, as I already do with iOS-to-Mac).

I absolutely recommend 1password to anyone sensitive about his or her password security!

No Mac to Mac sync at this time. But there is an often requested wifi feature coming to the Mac update that works with the current iOS app.

Yes there is. You can sync using Dropbox and you can access that info from any web browser logging into Dropbox. It's called 1Password anywhere (I think).

:cool:
 
It looks like Agilebits resolved the TouchID issue that no matter what you set the frequency to it would ask you for your master password after a day or so.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.