3 ms·
I don't know what options are still available, but the "3rd party" thing is why I ended up paying $100 or something to purchase 1Password back when it was still
by nucleardog 9y ago
I don't know what options are still available, but the "3rd party" thing is why I ended up paying $100 or something to purchase 1Password back when it was still only available as a one-time-purchased standalone app.
Even if it's open source, I'm in no position to effectively evaluate their crypto/etc. But I can do some basic reasoning about the possible attack surfaces.
With 1Password I hold all my data, and the software that I use to view it runs completely independently of anything else. Besides a takeover of my local machine or breaking the encryption, nobody gets my data.
With something like LastPass, they hold all my data. The software that I use to view it runs in my browser. The software handling all my passwords is running in the same program that I use to execute untrusted code from the internet thousands of times a day. This has bitten them in the ass a few times.
I'd love an open source password manager solution given the turn 1Password has taken towards being a "cloud service", but for the love of god can it please be useful without tying it to my web browser.