5 ms·

I have a few reasons to prefer 1P over a browser based option: 1Password doesn't require a cloud sync. I just use the local wifi sync. I'm less worried about

I have a few reasons to prefer 1P over a browser based option: 1Password doesn't require a cloud sync. I just use the local wifi sync. I'm less worried about data breaches as a result. 1Password lets me save more than browser passwords: especially on mobile where I have lots of apps to log into, which shares a password with a desktop website. Also, I store additional data (like bank info, account numbers, etc) in 1P, and browsers don't have UX for that, even if the back end could be useful for that. It also doesn't lock me into a browser.

icebraining 10y ago
I'd just like to point out that while it does use the cloud to sync, all data is encrypted on the devices before syncing. I do wish it could save other passwords, though.
JoshTriplett 10y ago
> 1Password doesn't require a cloud sync. I just use the local wifi sync. I'm less worried about data breaches as a result. Firefox Sync encrypts all of its data; a data breach on the server would only result in a pile of email addresses and encrypted blobs. > 1Password lets me save more than browser passwords: especially on mobile where I have lots of apps to log into, which shares a password with a desktop website. Fair enough. All the mobile apps I use just stay logged in once you log in once. > Also, I store additional data (like bank info, account numbers, etc) in 1P, and browsers don't have UX for that, even if the back end could be useful for that. Hadn't occurred to me to store non-passwords in a password manager. That seems like something a Firefox extension could provide on top of the Firefox password manager, which would make a nice substitute for a locally encrypted file. I wouldn't mind using that to store things like security questions/answers.
- mook 10y ago
  The old Firefox sync used a local-only passphrase to encrypt things. The new one, as far as I can tell, just tires everything to your Firefox Account (i.e. nothing local is required). That's not really better than what 1Password does, I think.
  - JoshTriplett 10y ago
    The current Firefox Sync (based on Firefox Accounts) still keeps everything client-side encrypted, rooted in password-derived keys and locally generated keys. It never sends the password to the server.
    - zeveb 10y ago
      > It never sends the password to the server. It does, however, download JavaScript served by Mozilla when you log into your Firefox Account, which means that Mozilla can cause your password to be sent to them unencrypted, if they so choose. This in turns means that a disgruntled employee, Mozilla the organization and any government which is able to compel Mozilla the organization or key employees can get access to your password at any time, rendering Firefox Sync completely untrustworthy.
      - JoshTriplett 10y ago
        That only occurs when you log into your Firefox Account via the web-based system, which necessarily has to use JavaScript to provide a client. If you log in via your browser, all the code lives in the browser. Or, if you prefer, you could run a self-hosted version of Firefox Accounts on your own server.

icebraining 10y ago

I'd just like to point out that while it does use the cloud to sync, all data is encrypted on the devices before syncing. I do wish it could save other passwords, though.

JoshTriplett 10y ago

> 1Password doesn't require a cloud sync. I just use the local wifi sync. I'm less worried about data breaches as a result. Firefox Sync encrypts all of its data; a data breach on the server would only result in a pile of email addresses and encrypted blobs. > 1Password lets me save more than browser passwords: especially on mobile where I have lots of apps to log into, which shares a password with a desktop website. Fair enough. All the mobile apps I use just stay logged in once you log in once. > Also, I store additional data (like bank info, account numbers, etc) in 1P, and browsers don't have UX for that, even if the back end could be useful for that. Hadn't occurred to me to store non-passwords in a password manager. That seems like something a Firefox extension could provide on top of the Firefox password manager, which would make a nice substitute for a locally encrypted file. I wouldn't mind using that to store things like security questions/answers.

mook 10y ago
The old Firefox sync used a local-only passphrase to encrypt things. The new one, as far as I can tell, just tires everything to your Firefox Account (i.e. nothing local is required). That's not really better than what 1Password does, I think.
- JoshTriplett 10y ago
  The current Firefox Sync (based on Firefox Accounts) still keeps everything client-side encrypted, rooted in password-derived keys and locally generated keys. It never sends the password to the server.
  - zeveb 10y ago
    > It never sends the password to the server. It does, however, download JavaScript served by Mozilla when you log into your Firefox Account, which means that Mozilla can cause your password to be sent to them unencrypted, if they so choose. This in turns means that a disgruntled employee, Mozilla the organization and any government which is able to compel Mozilla the organization or key employees can get access to your password at any time, rendering Firefox Sync completely untrustworthy.
    - JoshTriplett 10y ago
      That only occurs when you log into your Firefox Account via the web-based system, which necessarily has to use JavaScript to provide a client. If you log in via your browser, all the code lives in the browser. Or, if you prefer, you could run a self-hosted version of Firefox Accounts on your own server.