So you guys that are opposed to this are also opposed to services like LastPass and Dashlane ? Not the price but storing your passwords in the cloud.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Security Experts Wary as 1Password Subscriptions Push Users to Cloud-Based Vaults
- Thread starter MacRumors
- Start date
- Sort by reaction score
The Windows version (1Password 6) doesn't support local vaults and WiFi sync. Only the old version (1Password 4) does. And that is painful to use on a touchscreen.
Big disappointment if they no longer allow local storage of the passwords. I only use iPassword on my iPhone and Mac. There is no need for it to be cloud based, with a monthly subscription. If they force people to a monthly fee, I will not be using any longer, which is sad, because I really do like the app a lot and feel its the best one out there.
Greed > Service, even after the marketing dep has "dressed" the naked king.
I don't care that they push users towards cloud vaults (I store my vault in Dropbox, anyway), but I DO care about the push to subscriptions. The product will simply become too expensive. 36€ per year for an app?? I paid about that much for BOTH Windows + Mac clients back in 2013 and they still work absolutely fine.
The second issue that I have, is that the Windows app (especially the older v4 that I use) is subpar compared to the Mac one. Come on Agilebits, you can do better that that.
If my current 1Password clients stop working or become broken for some reason, I will seriously consider moving to another password manager, after many years.
The second issue that I have, is that the Windows app (especially the older v4 that I use) is subpar compared to the Mac one. Come on Agilebits, you can do better that that.
If my current 1Password clients stop working or become broken for some reason, I will seriously consider moving to another password manager, after many years.
It seems that more companies are getting infected with excessive greed and disguising it as "better for users."
Storing passwords on a cloud is the DUMBEST security move. It only works for the company's financial interests; they want slaves paying monthly subscriptions instead of individuals owning a tool. Subscription models sucks for so many things yet it's being built into more and more software...
I keep ALL my passwords in Apple's FREE Keychain app in Applications>Utilities. I don't need to pay an unknown company to give me access to my passwords, much less pay them monthly to store them on their damn cloud and tell hackers to come and get it... idiots.
Storing passwords on a cloud is the DUMBEST security move. It only works for the company's financial interests; they want slaves paying monthly subscriptions instead of individuals owning a tool. Subscription models sucks for so many things yet it's being built into more and more software...
I keep ALL my passwords in Apple's FREE Keychain app in Applications>Utilities. I don't need to pay an unknown company to give me access to my passwords, much less pay them monthly to store them on their damn cloud and tell hackers to come and get it... idiots.
I am. Lastpass has been hacked more than once.
I'm not sure the so called security experts here make any sense at all. Your passwords aren't any less secure on a cloud based server than with the 1PassWord folks. Security comes from encryption of the files not the location of the files. Any server can be hacked it is a lot more difficult to decrypt a well encrypted file.
... generating ad impressions via false controversy.
[doublepost=1499862579][/doublepost]
Doesn't do the same stuff.
not 1password user here, so serious question to users: what's wrong with Apple's keychain?
Why using a subscription when Agile could store they password on iCloud?
Why using a subscription when Agile could store they password on iCloud?
I'm not interested in the subscription model.
Frankly it sounds like a security researcher or two was paid off here. A cloud based repository isn't any less secure that 1Passwords. It all comes down to the quality of the encryption of the file. The fact of the matter is that anything exposed to the wild network can be hacked so The real security comes form unreadable files.
The difference is DropBox is separate from 1Pasword, so there are multiple accounts a dirtbag would have to figure out to get your data. With LastPass style storage, all your golden eggs are in one basket because the product and the data are with ONE service. There's no separation unless they go with something like Proton email where your account password and encrypted data password are separate and different. But then people will complain about having to remember 2 passwords.
I can’t wait for the AgileBits PR guy to come and AstroTurf the F out of this MacRumors thread. I lost pretty much all respect for their company purely based on his condescending attitude towards anyone criticizing their subscription scheme here and/or on r/Apple.
I use both (I have a standalone license, have used 1password for about 5-6 years from memory)
1password gives you more control over password generation policy
you can open your vault from a HTML5 compliant web browser (so i can in theory get it via Linux)
i can store it wherever i like, i'm not tied to icloud
i can run 1password on a PC or Android device
1password does secure notes
1password has a better interface for multiple logins for a given site
1password can generate passwords for storage outside of 1password
1password has apple watch support - so i can display a set of passwords or other items on my watch (e.g., girlfriend's house alarm code)
etc.
there's nothing really "wrong" with Apple's keychain - but it has a bunch of limitations compared to 1password. primary one being that it is Apple device only.
IF 1password ever does mandate 1password storage server usage, i'll migrate all my stuff to Keepass in a heartbeat. I already use keepass for work stuff.
edit:
as to why agile are using their own service instead of icloud - the software is cross platform. iCloud is not, other than the really crappy windows version. 1password can currently use icloud, wifi device sync, dropbox and now their own server.
iCloud as the only sync method for 1password is just not viable.
Last edited:
Guess I'll be sticking with 1Password 6 for Mac and 1password 4 for Win for a long time. I like the software but have become disillusioned with the devs for treating Windows users as second class citizens for a long time. The Win version of 1P6 only supports the subscription service while version 4 looks like something out of WinXP.
I'd rather pay for the software once, maybe a discounted price for upgrades but not a little bit every month. Those few bucks add up quickly and since the software has had very little real improvement for years, I don't see why I would want to pay $35.88 every year for it.
I also like the idea of having control over where I store my vaults even though I currently cram them into Dropbox.
[doublepost=1499863015][/doublepost]
1password works across devices. I can use it on my Windows desktop, my work Macbook Pro, my iPad and my Android phone. UI is also a lot more obvious and works in every browser.
I'd rather pay for the software once, maybe a discounted price for upgrades but not a little bit every month. Those few bucks add up quickly and since the software has had very little real improvement for years, I don't see why I would want to pay $35.88 every year for it.
I also like the idea of having control over where I store my vaults even though I currently cram them into Dropbox.
[doublepost=1499863015][/doublepost]
1password works across devices. I can use it on my Windows desktop, my work Macbook Pro, my iPad and my Android phone. UI is also a lot more obvious and works in every browser.
So, Keychain doesn't store your passwords in iCloud?
Yep, that is correct. It's much better that having your service and your data coming from the same company.
Still, if I'm forced to a subscription, I will probably consider LastPass.
[doublepost=1499863271][/doublepost]
1Password also works with Windows and Android.
[doublepost=1499863321][/doublepost]
My thoughts EXACTLY.
Storing passwords on cloud services is fine, so long as they're encrypted via a strong password or ideally 2 factor authentication.
1password (And other password sync programs) are designed so that even IF someone steals your password database, they won't be able to crack it in a hurry. there are various safeguards build into the software to make attempting to brute force the passphrase take a non-feasible amount of processing power.
the assumption for ANY password database worth its salt should be to be built with the assumption that someone unauthorised HAS stolen your password database file.
most reputable vendors of keychain style software do this. anything stored in the cloud should be encrypted and an assumption made that someone can download it.
1password (And other password sync programs) are designed so that even IF someone steals your password database, they won't be able to crack it in a hurry. there are various safeguards build into the software to make attempting to brute force the passphrase take a non-feasible amount of processing power.
the assumption for ANY password database worth its salt should be to be built with the assumption that someone unauthorised HAS stolen your password database file.
most reputable vendors of keychain style software do this. anything stored in the cloud should be encrypted and an assumption made that someone can download it.
Exactly. And who pays for all the damage when they are hacked and hackers decrypt your account information?
Moreover, the way 1Password is choosing to respond to queries about local storage gives me pause about how they would handle a security breach. (Hint: like politicians, they are refusing to answer the questions posed about retaining a local storage option in future versions. They just keep repeating the "we aren't removing existing functionality in current versions" mantra).
Exactly. I will look for other options that allow me to store my information locally but if I am forced to use the cloud, why would I pay 1Password when Apple offers a similar service for free?
Go read their forums. I just did. 1Password just repeatedly states that they will not remove our ability to use local storage on our current version of 1Password, but there is no commitment to future support for current versions (i.e., future OS/iOS changes could make current versions incompatible and thus make password data inaccessible) and when asked if future versions will support local storage options, they refuse to answer the question ("our roadmap changes constantly" or some other BS).
I do not expect any software company to support any version of software perpetually without a paid update, but their forums make it clear that the current version of 1Password is the last version that will support local storage. The next version will be subscription only.
subscription only = cloud storage only
Seems cloud based solutions are standard these days. Let's see if they actually do get hacked. Who can blame these companies. You can't sustain a business on the pittance people think they should pay for software. Have you seen the price of food, clothing and shelter in a western city? It seems like a fair price for the service. If it's not your thing then move on and stop complaining. Your in the wrong snack bracket. Maybe consider a Chrome book. Maybe all the time you spend complaining about a few dollars a month could be put to being more productive and bringing in a few bucks.