Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

My history with 1Password:

- Purchase a stand-alone license, getting well-performing and feature-complete native clients with several options for vault sync that are under my control.

- Upgrade to 1Password 8, a version that sounds great, but has quietly removed local sync unless you checked forum and blog posts before buying.

- Watch the clients go from being native to Electron and losing many, many features. Get forced into using the web app for simple things like seeing history.

- Watch browser integrations get progressively worse (check out the reviews on the Firefox extension, oh boy)

- Even if you've been using 1password 7 (the version you paid a good chunk of change on for, in 1Password's own words, a life-time license), you won't be able to use it with browsers at all soon https://support.1password.com/kb/202303/.

- Get popups and unwanted opt-out integration with social media logins, when I've gone out of my way to purge garbage like "login with google" from my internet experience.

- Get unwanted opt-out telemetry forced on you, which regardless of their assurance will eventually leak PII like it always does. People make mistakes, c'est la vie. I would have no issue with opt-in telemetry.

I think this is it for me. Forced telemetry is a small thing, but it's just one of many poor decisions. I'm sure it's a smart business decision and their investors will be happy finding more and more ways to extract value out of users. I just want a simple password manager, so after a decade this is it for my family and myself.



Migrated to Bitwarden for the opensource years ago.

Stayed for cheaper price, linux support, simplicity and "out of my way" philosophy. Never looked back to 1password.


Same. When I started using 1p, the vault was stored locally, and it was possible to decrypt it at the command line using openssl. They prided themselves on this. They moved to cloud-based, and at one point I went to check if data export worked, and it did not. I opened a support ticket, and before even offering any actual help they wanted to know why I wanted to export my data anyway. Then they wanted me to download and run some telemetry binary to collect info about my system. I figured out the problem myself without them, and told them why I felt this meant they now had a value set that meant I could not rely on them going forward. They offered me a discount code.

Bitwarden is great.


I remember when they gave enough information about their vault formats that I could write my own linux app to fetch data out of their .opvault format in roughly an afternoon!


Same. I think here is a good place to shout out to Vaultwarden:

https://github.com/dani-garcia/vaultwarden

Your password data, back under your own control.


Why does it need a server? Does bitwarden have the ability to just use a local vault?


Bitwarden is cloud-based with synchronization to local caches. If you want total control over your data with Bitwarden you will need to run the server/cloud side. I'd caution that running a Bitwarden server is not for everyone, as one could make the security worse than the Bitwarden-company-hosted cloud service.

I run Vaultwarden on my LAN, with no public/Internet facing service, and sync only on my LAN.


If you're looking for something that's offline first go for pass [0], gopass [1], or any keepass-compatible [2][3][4] password manager and sync the database yourself.

[0]: https://www.passwordstore.org/

[1]: https://www.gopass.pw/

[2]: https://keepassxc.org/

[3]: https://www.keepassdx.com/

[4]: https://strongboxsafe.com/


I'd add Keepassium for iOS, I think it's free for a single database.

https://keepassium.com/


Same, though I just use the free Bitwarden, not sure what the paid one provides.

It's been good. Very simple and reliable. Has barely changed in years of use and hasn't needed to.


I pay them for the TOTP authentication alone, so that I don't have to never ever use google authenticator ever again, but it also feels good to be able to support such an awesome project, even if it's only a little.


I pay them for the family plan. Being able to share items with my wife and kids (particularly joint accounts) is extremely useful, and they do it without creating two classes of passwords (like LastPass, my previous vault).

BTW, the paid accounts provide TOTP code storage, more comprehensive password health reports, emergency vault access for others, hardware key support, someone to call with problems[0], and encrypted file sending.[0]

[0] https://bitwarden.com/pricing/


I have a similar history.

The biggest loss for me on v7 -> v8 is 1Password Mini - that's a wonderful little 'browser extension for the desktop', and quick access is just awful to use in comparison.

It's not helped by their responses basically always being "but we like this, so it's better!" - they don't listen to customer feedback any more, and they pair it with their 'quirky' comms style that just comes off as condescending & dismissive. Collecting telemetry doesn't help if they ignore the feedback they already have.

edit: plus, they keep showing hard/impossible to dismiss UI in web pages to try to capture/fill fields, and it makes using the web pages really difficult!


This so much! I hate hate hate how there is no context anymore for filling in logins and how it has to all happen inside the browser. It's normal for me to have 5-6 different logins for websites. In v8 I can only use the tiny bar in the webbrowser to select one. But it doesn't let me search or give me information on which login is which.

In v7 with 1Password Mini I can do a fuzzy search outside of the browser and then just press enter to fill the details.

I'm still holding on to v7, but apparently we just can't have nice things. Sounds like it may be time to move on soon. :'(


I purchased 1Password 3 10 years ago. The license transfered for free up to 1Password 6, so that's the one I continue to use. I sync the vault myself.

Purchasing licenses in those times before everything moved to subscriptions was a good deal.


Bought full license some time in 2014. Watched them disintegrate into subscription hell while making the apps worse. Moved everything to Firefox and Apple Passkeys. They integrate better with my workflow anyway.


> Watch browser integrations get progressively worse (check out the reviews on the Firefox extension, oh boy)

This doesn't align with my experience, and I've been using their app/service for years (the Windows & Mac apps, along with the Chrome and Firefox extensions). I don't mean to sound harsh but I'm scrolling through the negative reviews on the Firefox extension page as you suggested, and it's hard to take the majority of them seriously:

"i have never been happy with 1Password. Too frustrating to use."

"TOO DIFFICULT TO SIGN ON."


I have enjoyed how quickly 1Password was adopting new technology and features while still staying stable. It just worked. Lately, that hasn't been the case. Recently, the browser extension, which is my main interface for 1Password, has been acting up.

I use browser extension in Edge on macOS. I am on a page signing up for a new website and want to save credentials. It doesn't. Keeps erroring out. Disabling and re-enabling extension, and then refreshing the tab finally fixes it. I reached out to customer support and they told me to sign out to force refresh the cache. I did it, but the problem wasn't fixed.

1Password needs to fix the bugs that their customers are already reporting, instead of alienating their users with telemetry. I don't think the learnings from telemetry will be worth the damage it will cause to their brand.


> Recently, the browser extension, which is my main interface for 1Password, has been acting up.

> I use browser extension in Edge on macOS. I am on a page signing up for a new website and want to save credentials. It doesn't. Keeps erroring out. Disabling and re-enabling extension, and then refreshing the tab finally fixes it. I reached out to customer support and they told me to sign out to force refresh the cache. I did it, but the problem wasn't fixed.

I've had the same issue, support told me the exact same thing:

1. Lock the 1Password app (which also locks the extension).

2. Unlock the 1Password app (which also unlocks the extension).

If the issue is still present, please go through the steps below to fully re-sync your account:

1. Right click the 1Password icon in your browser toolbar and choose Settings.

2. Under General, disable "Integrate with 1Password app".

3. Under Accounts & Vaults, sign out of your account.

4. Sign back into your account.

5. Go back to General, and re-enable "Integrate with 1Password app".

I told them it didn't help at all, they claim they've released a fix for "one of the possible causes of the bug", in the beta version of the extension, they asked me to make a new chrome profile and install the beta version but I just didn't bother at that point and just lived with it..


FYI, I spent some more time troubleshooting and might have found the root cause. I had switched to 1Password 8 Beta before it was released because I enjoyed the updated UI. Once version 8 was officially released, I switched to the Stable channel, but the desktop app was stuck on the old beta version. So, beta was old, but the extension kept getting updated likely causing the bad behavior.

I uninstalled the macOS beta app and reinstalled the stable version. It seems to be working fine for the last day or so.


That's so frustrating. I hope they figure this out soon.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: