Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Used to until they got greedy with the subscription BS. Switched to EnPass and it's basically the same and no subscriptions.

I used to use enpass when it was free and then did the paid “pro” thing. App worked well but it’s closed sourced and based in India. No offense to India but I just felt if the app were to have issues or folded altogether no telling where my data may end up. Close source is a no go in my book when there are alternatives. 1PW isn’t fully open but it is to a degree. Don’t love the subscription bs but they do offer excellent CS and the app is constantly evolving. I realize to do this a company has to be profitable.
 
Super conflicted about this one. Though, I would be estatic if Apple bought Little Snitch. I won’t Mac without it or 1Password.

Agreed though I don’t think Apple wants user ability to decide what Apple connects to and what it doesn’t. I can’t see Apple giving that access.
 
https://1password.com/security/

I've used LastPass for years and went full 1Password last year after using 1Password (standalone) and Lastpass for 6? years.

1Password encrypts the data based on a master password (mine is > 32 characters long) and only I know the master password (not 1Password). They use a combination of the master password, secret key, and 2 factor authentication to encrypt the data. I have 2 factor authentication turned on as well.

LastPass was similar with their master password and salting the encryption x amount of times and 2 factor authentication.
But doesn't 1password log you into websites using a password that the site first has to know. So how can 1password protect that site from getting hacked and someone getting your password from that end?
 
But doesn't 1password log you into websites using a password that the site first has to know. So how can 1password protect that site from getting hacked and someone getting your password from that end?

No password program can protect you from a site getting hacked. That is on the site owner to put proper protection in place of their password file.

A good password program, like 1Password, LastPass, or even Keychain will help mitigate your vulnerability in a few ways:

  • Create better passwords that are hard to guess/crack
  • Encourage the use of a different password for each site. (Many hackers assume, correctly, that users will use the same or similar passwords on multiple site. So, if they guess your banking password, it would be easy to guess your credit card password.
  • Some password programs (1Password is one), can alert you if a site is hacked and encourage you to update your password.
 
But doesn't 1password log you into websites using a password that the site first has to know. So how can 1password protect that site from getting hacked and someone getting your password from that end?

I apologize, "the data" I was talking about in my post was 1Password's own database. 1Password can't protect the site, all it can do, like the post above me said, is make your passwords better.
 
  • Like
Reactions: Mac'nCheese
No password program can protect you from a site getting hacked. That is on the site owner to put proper protection in place of their password file.

A good password program, like 1Password, LastPass, or even Keychain will help mitigate your vulnerability in a few ways:

  • Create better passwords that are hard to guess/crack
  • Encourage the use of a different password for each site. (Many hackers assume, correctly, that users will use the same or similar passwords on multiple site. So, if they guess your banking password, it would be easy to guess your credit card password.
  • Some password programs (1Password is one), can alert you if a site is hacked and encourage you to update your password.
OK, I see. So I don't need to make up hard passwords for every site, it will do it for me. I just need to remember my 1password. that makes sense.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.