4 ms·
I use 1Password, and the only incentive which make me switch is completely open source good quality UX solution.
by solomatov 9y ago
I use 1Password, and the only incentive which make me switch is completely open source good quality UX solution.
- hyperbovine 9y agoRaise your hand if you want to spend your free time writing that
- solomatov 9y agoNo, but I am sure that there're people who do.
- Nullabillity 9y agoSo.. KeePassXC?
- awinder 9y agohttps://keepassxc.org/images/screenshots/macos/screen_003.png https://keepassxc.org/images/screenshots/macos/screen_003.pn... This is not really an acceptable UI for OSX
- nerdponx 9y agoNo? Looks fine to me. I use it every day. There is also the Mac-first versiom, MacPass: https://github.com/mstarke/macpass https://github.com/mstarke/macpass
- tw04 9y agoBrowser integration is poor at best. I've given it multiple goes and walked away disappointed every time.
- Nullabillity 9y agoI'm not having any issues with https://addons.mozilla.org/en-US/firefox/addon/keepasshttp-connector/ https://addons.mozilla.org/en-US/firefox/addon/keepasshttp-c... and https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae https://chrome.google.com/webstore/detail/chromeipass/ompiai.... My only annoyance is that KeepShare's autofill doesn't pick up Firefox Android's password fields, but Chrome works fine there. KeePassXC has a KeePassHTTP server built-in, so no plugins needed on that side.
- bufke 9y agoI'm working on that (https://passit.io https://passit.io) and I'm curious what your opinion of good UX is. Many here mention vulnerabilities from web extension autofill (domain matching issues, etc). Do you have any opinion between: A) No autofill. Copy and paste (but good simple shortcuts). Least attack vectors, but least convenient. B) Autofill but only when user prompts (with shortcut). This avoids having to inject js into web pages. The web extension needs less overall permissions this way. It avoids certain attack vectors. Features would be less discoverable - you have to know to hit the shortcuts or click a browser icon. C) Prompts to Autofill in the page. This is the most common technique, lastpass does it. Vulnerable against domain matching misparsing. It's a big attack vector but there are plenty of common password manager vulnerabilities that can be studied and mitigated against. Or something else? Also what issues do you have with current open source password managers?