Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
No, it's not. The issue with 1Password was not that passwords were being stored as plain text - only the metadata for passwords (the URLs and website names) was. The passwords themselves were encrypted. And AgileBits now provides a way to encrypt the metadata, too. This blog explains it well.

(Incidentally, the post in the tom's guide thread that you cited even stated that it was about the metadata, but began with "1Password was found to be storing your passwords in plain text," which is incorrect.)

Truth is, nothing is perfect. Whether you store your passwords and other sensitive data using a password manager or you keep them in a Post-It note under your desk, there are methods like key logging that can steal them. You just have to be realistic in balancing risk vs. convenience. For me, 1Password offers just the right balance.

Thanks. In order to use key logging to steal the passwords, one has to install some kind of programs on my computer. Right? Since Mac OS is more secure than Windows, does that mean if I choose 1Password, I better only install it on iPhone and/or Mac only and avoid using the Windows version?
[doublepost=1453594355][/doublepost]
However, unless you can memorize dozens and dozens of different strong passwords, I think using a manager that let's you retain full control over your passwords is relatively low risk.

Somebody mentioned that it is not a good idea to use one password for multiple accounts. What is the reason? Is it because if the bad guy found that password, he/she would try to use it to access other accounts? Is having only 2-3 passwords for multiple accounts a good idea?
 
I use Onesafe. Keeps and generates passwords for you.

OneSafe for sure. Read the reviews for their new version. AWESOME. A real Mac interface.

Tried several of the “safe” apps for Mac with iOS integration. This is by far the best. Simple and intuitive. It is powerful yet easy to understand. Backup is VERY easy to create and is password protected itself. This new version even has a better user interface - both the Mac version and the versions for your iPad and iPhone. It integrates 100% with Safari and all passwords are saved on all your Apple units via iCloud! Both iOS and OS X works seamless together. Very “Macish” other simliar apps are very PCish and does not feel as intuitive as OneSafe. Price is a joke but most likely they will raise it soon so for us who buy it now it is a bargain! Black Friday every day...

I use the app on a daily basis - normally I enter all my info like credit cards, codes etc. on my computer at home and then use it from my mobile units. Now with the update it even creates well encrypted “cards” inside the OneSafe app so I don´t have to open Keychain every time my wife asks for a password - just email her that “card” from my OneSafe to her OneSafe 100% encrypted. Family Sharing means you buy the app once and you can both use it.

Highly recommended app - only negative is the default colors inside the app but you can change them manually!
 
Thanks. In order to use key logging to steal the passwords, one has to install some kind of programs on my computer. Right? Since Mac OS is more secure than Windows, does that mean if I choose 1Password, I better only install it on iPhone and/or Mac only and avoid using the Windows version?

In my opinion, you're over-thinking this. If you use a Windows computer and take reasonable safeguards (such as installing anti-malware software), you'll be fine with 1Password or any equivalent password manager.
 
Somebody mentioned that it is not a good idea to use one password for multiple accounts. What is the reason? Is it because if the bad guy found that password, he/she would try to use it to access other accounts? Is having only 2-3 passwords for multiple accounts a good idea?

The best is a different password for each account for obvious reasons. :) If you are using something like 1Password, this is easily accomplished with very strong passwords, that you don't have to remember but are easily implemented and it makes if fairly flawless to change passwords, and 1P tracks that too.

Based on this thread, I ended up taking the plunge and am satisfied with 1 Password (it was on sale). Started a how-to thread here at MacRumors. :)

I might as well ask the experts, but I suppose that not using your browser's password manager is ideal in case your computer is ever invaded? All those passwords are just laying there for anyone to gets access to your computer for every account in there. 1Password keeps them in a vault untouched as long as the Master Password is unknown.
 
Last edited:
In my opinion, you're over-thinking this. If you use a Windows computer and take reasonable safeguards (such as installing anti-malware software), you'll be fine with 1Password or any equivalent password manager.

I have been using Norton for over 10 years. No problem.
 
I use lastpass to store login info and other sensitive notes. It has an iphone/mac/web app. It let's you generate secure password. You should avoid using the same password for different services.

I too use last pass. and ya using same username/password for anything is asking for disaster. Convenient for you to remember, but also easy to bad guys to get.

I dunno any of my passwords.. Not even my master password... Its in encrypted format (64 character) stored on usb on my key chain... so everywhere i go... "it" goes :D

Now that's what i call convenient.

Of course if loose access to it,, my goose is well cooked. so maybie i should consider duplication on second usb.
 
1Password for me. Took me a while to get used to it / "get" it ( I'm not overly tech savvy, lol ). I love it. Apple's keychain is ok, but I feel, if your laptop is stolen (as mine was - and I did have a password to log in to it ), passwords seem easier to access than with a password generator that has it's own master password. 1Password creates complex passwords and just makes sense for my uses now. Recommended.
 
1Password for me. Took me a while to get used to it / "get" it ( I'm not overly tech savvy, lol ). I love it. Apple's keychain is ok, but I feel, if your laptop is stolen (as mine was - and I did have a password to log in to it ), passwords seem easier to access than with a password generator that has it's own master password. 1Password creates complex passwords and just makes sense for my uses now. Recommended.

I have become a 1Password convert also (when it was on sale ;)). My wish would be that they would offer "word" passwords with a mix of uppercase, special char, and numbers mixed in. As a rule I hate a mishmash of characters.
 
Lastpass for remembering the passwords.

Your another question:
Use ONE non-identified email for all other emails beside your private. If your private email is name.lastname@something.com than open one email like 73848625184@gmail.com
One good thing to have one email for everything else is that you will always have access to all of your credentials at one place. And keep that email very secure. Gmail has very good spam and filters and you can use it very cleverly.

Third, you cannot change all of your passwords with one click since passwords can be changed only on the server's side.

I've tried this, and it is extremely cumbersome. You have to select each password one by one manually in order to share passwords across browsers.

It would be far easier to transfer/import/export bookmarks wholesale from one browser to another. I dont know how to do that though.
 
Trying to get a feel for relative vulnerability. I've already discussed this a bit in this thread, but thought I'd ask again.

As a fairly new 1Password user, I am slowly moving passwords over to that software. I have turned off automatic saving of passwords on my browser and via my Apple keychain.

On my Mac I have a encrypted sparse disk image with password protected Pages document that besides passwords, includes info important to me regarding bill payment, status of bills, home management, repairs, warranties, and the like. Is it possible to change the password on a sparse disk image or must a new image be created to create a new password?

On my iPad, I keep a .pdf document with the same info, same password, but it is encrypted with a password applied by Adobe Acrobat Pro. If I lost my iPad, they would have to break into the password protected iPad with the intent of looking for passwords vs just stealing the iPad for use or resale, identify the document as important, which might not be that hard if it's encrypted, and then break into the password protected pdf.

This password would be hard to guess but I don't believe it would not standup to a brute force attack. How vulnerable are these as in how worried should the average person be of such an attack?
 
For using 1password on multiple platforms (Mac OS, Windows and iOS devices), which is the recommended service to sync with? iCloud or Dropbox. What are the pros and cons of each option?

From this article, it looks like Dropbox is the one to go if one uses Mac, Windows and iOS. I am interested in hearing real user experiences.

https://support.1password.com/sync-options/


I installed 1password on Mac OS. Do I need to do the syncing first before I can use the iOS version?
 
Last edited:
Has anyone tried Dashlane? (https://itunes.apple.com/us/app/dashlane-free-secure-password/id517914548?mt=8#)

It seems to be very positively reviewed at the AppStore.

Dashlane supposedly assesses all of your passwords and you can have it change the identified weak ones, or update all of them. (I wonder if that really works?)

I'm between this and 1Password?

Or perhaps I'd start with Dashlane free to automatically change my weak passwords then switch to 1Password pay...?
m1702.gif
 
Hello, with so many places requiring online registration and so many email accounts, what is the best way to handle so many accounts? Do you use different userid and passwords? Do you use the same userid and password? Do you have a file to store all the different passwords of different accounts? What if few months later you want to change the password of some/all of your accounts at the same time? What is the best way to do this?

firstly, is don't run around signing up for all possible accounts u can unless u need them.. :)

I use Lastpass on Mac, iOS devices.... No problem.

Also we wanna be secure so we may not trust cloud platforms, but hey,,, u gotta trust your ISP so :p

only thing i do like abut Lastpass is u can change the default value of rounds client side.
 
Last edited:
For using 1password on multiple platforms (Mac OS, Windows and iOS devices), which is the recommended service to sync with? iCloud or Dropbox. What are the pros and cons of each option?

From this article, it looks like Dropbox is the one to go if one uses Mac, Windows and iOS. I am interested in hearing real user experiences.

https://support.1password.com/sync-options/


I installed 1password on Mac OS. Do I need to do the syncing first before I can use the iOS version?

I use Drop Box with 1 Password, no issues. Since I use MacOS for important stuff, I installed it there first and then put it on myniPad, and then Windows. The Mac Version seems to be more advanced than the Windows version.
 
I just use my Notes Lite app (older apk) on my Android where all my passwords and pin codes are stored. It has a passcode for it to open the note.

Never use birthdays or anything related to you esp for my security pin lock on my phones. I use a basic pin and try to never have it start between 0-3, so no birthday dates or years.

My passcode starts with my least favorite single digit which is 8 and the next number isn't 0 since I was born 80 and Jerry Rice is my NFL player ever. Make the security numbers totally random.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.