6 ms·
Apple to deploy 1Password to all 100,000 employees, acquisition talks underway
- qaq 8y agoHope they keep things working well for current customers
- jumbopapa 8y agoThere's rumors that Apple will release a Prime like service. It would be very nice to see Music, 1Password, iCloud Storage, and whatever TV show they are working on bundled into an annual subscription.
- jonknee 8y agoIt would be lame if Apple bought 1Password and continued to charge for it. It doesn't have the same economics of stuff like storage or music streaming and should be free if backed by a company like Apple. I have no problem at all paying Agile Bits, but I don't want to pay Apple for a password manager.
- Eridrus 8y agoSo, on one hand, I agree, password managers/FIDO should basically be part of every OS/browser and tech companies should come together to make it all interop seamlessly for the good of society. On the other hand, the biggest barrier to adoption that I have found is people losing their master password. And supporting good account recovery is difficult and expensive. A subscription service that actually had a real way of validating identity for account recovery could be something worth paying for, for people who are not very tech savvy. Maybe we can come up with a good account recovery service without dedicated customer support folks, but the moment you have a bad experience, you're probably going to go back to Password123.
- Nullabillity 8y agoAny possibility of account recovery completely torpedoes the product's security.
- sensecall 8y agoThat's really interesting, keen to read more if you could share a link? The only thing I could find was this - https://redef.com/original/apples-prime-and-explaining-apples-video-ambitions https://redef.com/original/apples-prime-and-explaining-apple... Had this thought yesterday when I switched to Apple Music and wondered why they don't bundle their services... could even offer regular handset updates.
- asdsa5325 8y agoThey could of course do that without an acquisition, just a business deal with 1Password.
- chucky_z 8y ago1Password is amazing. Hopefully Apple doesn't even touch them, and they continue developing that CLI that's been hinted at and teased a few times.
- ReidZB 8y agoIsn't the CLI already released? See https://support.1password.com/command-line/ https://support.1password.com/command-line/ I haven't used it, so I'm not sure how feature-complete it is.
- chadlavi 8y agoNeat, TIL they have a CLI
- xur17 8y agoI tried to use it, but the syntax is way more complicated than it needs to be to retrieve a simple password. After 10 minutes of trying to figure it out I gave up and just used pass instead. If anyone knows how to use it to retrieve passwords / copy them to the clipboard, I'm curious because we use it at work. edit: It looks like it might be possible [0], but it requires a long command or a command alias. The lack of tab completion is kind of problematic though. [0] https://gist.github.com/justinline/e11ac0f08f267502b9e96362457d03c6 https://gist.github.com/justinline/e11ac0f08f267502b9e963624...
- crymer11 8y agoop get item <name or UUID> | jq '.details.fields[] | select(.designation=="password").value' | sed 's/"//g' | pbcopy will put the password for <name or UUID> on your clipboard on a Mac. (I'd probably wrap everything before `| pbcopy` in a function so it's easier to call and use directly if you don't want to copy the value)
- craftyguy 8y ago1password is a proprietary walled garden. There are many like it, and they are all traps.
- hs86 8y agoI prefer and pay for 1Password's subscription but I already tested the export and import into enpass.io: It works very well! If the acquisition takes place, I will switch immediately. I am against vendor lock-ins and Apple is the first company I associate with that.
- kup0 8y agoThe 'acquisition talks' appear to still be a hearsay rumor but who knows. I am an Apple hardware/OS user, but I prefer other companies' services. Worried if there is an acquisition that Apple will make an inferior product and shutdown 1Password :/
- ghostly_s 8y agoApple already has an inferior product, the password syncing service built into iCloud. I'm not sure I see what value 1Password has to them at all except for it's cross-platform support and more robust feature set.
- kup0 8y agoAgreed, worried an acquisition would just absorb 1Password into the existing inferior product. I hate it when big companies do this. They often shut down good products and then years later they've only implemented a fraction of the acquired product's feature set into their own product.
- Karunamon 8y agoAcquisiton? This doesn't bode well for the Windows version of 1Password.
- Someone 8y agoI don’t understand this deal. What’s in 1Password that isn’t in iCloud Keychain or easily added to it? Windows and Linux support? Is that worth much to Apple? If so, why?
- makecheck 8y agoWhen 1Password noticeably improves the usability of all your competitors’ platforms, buying it and killing it makes sense.
- freehunter 8y agoI'm a LastPass user and have never used 1Password, but is 1Password really better than the competition (like lastpass)? Buying your only competitor and shutting it down is great, but buying one of many similar competitors just seems like it would bolster adoption of the others and improve their market position more than it would improve yours.
- Walkman 8y ago1Password is an order of magnitude better regarding the UI and UX.
- jjeaff 8y agoLuckily there are plenty of alternatives that are comparable.
- pvg 8y agoProbably the team vault management stuff and ability to use it across different browsers. There's a lot to be said for not-adding any kind of group management to iCloud Keychain.
- deleted 8y ago[deleted]
- hendersoon 8y agoIf this is an acquisition, Apple would integrate 1Password into their ecosystem, enriching it immeasurably, but the Windows, Linux, and Android versions would almost certainly be abandoned. That's a shame.
- jonknee 8y agoApple makes Windows and Android apps, I don't see why this has to be different.
- ceejayoz 8y agoThey make a very limited set of Windows and Android apps that are all clearly intended to drive sales of Apple Music and their hardware. (One of their three Android apps appears to be a "move to iOS" one, too.) 1Password for Android doesn't drive any Apple product sales.
- SyneRyder 8y agoThen again, when Apple acquired TestFlight, they discontinued support for Android with only 1 month's notice: https://techcrunch.com/2014/02/21/rumor-testflight-owner-burstly-is-being-acquired-by-apple/ https://techcrunch.com/2014/02/21/rumor-testflight-owner-bur...
- virusduck 8y agoI'd view this as a way of adding support for Windows and Linux. One of the most irritating things about iCloud Keychain is that on my work computer (linux) I have to whip out my phone and look up passwords in keychain. Migrating to 1Password (and seamlessly integrating it into iOS) would be a huge value to everyone if they maintain interoperability. If they kill the other platforms, they gain nothing.
- ghostly_s 8y agoIf Apple just wanted a password manager for their ecosystem, they already have one. iCloud does this. I'm very skeptical o the acquisition aspect to this story; cross-platform support, key-sharing, and enterprise management are probably useful features for Apple's employees but not particularly aligned with their consumer-facing service offering.
- TazeTSchnitzel 8y agoIf Apple has thus far dogfooded iCloud keychain, will it now suffer? :(
- nothrabannosir 8y agoCould it possibly become any worse? The UI has always been lacking, and functionality has gotten worse over time (e.g. aws-vault cannot actually work without popping up a prompt window every other minute since a recent update to OSX). Discoverability is poor, there are a hundred keychains ("login", "icloud", "system") and even I as a security conscious IT professional don't know what they mean, god have mercy on the casual user finding their way. Where are which passwords stored? WiFi passwords are stored across multiple chains depending on OS updates, but not migrated across. To view the password of a single item I have to enter my password twice, for some reason: once to.. unlock the keychain, once to unlock the item? Or to allow "keychain" access to the item? What? God, the icloud keychain cannot die soon enough. What a shit show.
- ballenf 8y agoWow, it's interesting how different people's perspective can be. One of the deciding factors for me switching 100% to iOS and MacOS was the unified keychain across all browsing and apps. For the first time in ever I rarely do password resets in an app. There are a few apps that "brilliantly" roll their own password input fields and those don't work, but they are rare. And a few websites that split the username and password onto separate screens that are kind of hit or miss, but again rare. And on the ios12 beta, the keyboard grabs one-time sms codes and auto-inputs them with one tap. From my layman's perspective I have one keychain and it has everything in it. And it just works 99% of the time. But I don't use it for AWS anything. I don't know or care about the different kinds of keychains -- they just work. Not doubting your experience, just wanted to throw out there another one. I only wish Authy (my current preferred 2 factor token generator) was more integrated with the Apple keyboard, but it has a widget that makes things pretty quick.
- ableal 8y agoApp store preview link: https://itunes.apple.com/us/app/1password/id568903335?mt=8 https://itunes.apple.com/us/app/1password/id568903335?mt=8 (no additional info, just for convenience looking it up)
- jakewalker 8y ago"Rumours of my acquisition are completely false. My humans and I are happily independent and plan to remain so." https://twitter.com/1Password/status/1016710603359096846 https://twitter.com/1Password/status/1016710603359096846
- davidkuhta 8y ago> Apple had very specific requirements for this deal, code-named B2 Guess B2 was the code-name for a different project, one focused on leak detection.
- jw1224 8y agoThat's weird — I'd read on the internal memo it was going to be called K5.
- deleted 8y ago[deleted]
- untog 8y agoVery glad to hear it. Last thing I need is for a neglected/abandoned Android version of 1Password.
- wilsonnb2 8y agoCertainly wouldn't be the first time a company didn't want the public to know it was talking about being acquired.
- evan_ 8y agoThere's a difference between being quiet about an acquisition and just completely lying about it though- especially from a company that relies on being considered trustworthy
- solomatov 8y agoThey say that they currently plan to remain independent. It doesn't mean there're no acquisition talks. And also this doesn't mean that there're no conditions under which they consider being acquired.
- ttoinou 8y agoOff topic : does anyone know why using these kind of software would be more secure than storing the password ourselves in text files ? I fail to understand as hackers / virus makers just now need to hack one software to get everything
- ghostly_s 8y agoPassword managers facilitate password strength best-practices, which without them have ~0% adoption rate.
- entee 8y agoThey don’t store the password, they store the cyphertext where your single longer password is part of the key. If you wanted to do things that way yourself, my understanding is that you’d be just as secure if you stored the cypher text in a file on your computer. Also these companies provide nice integrations with web browsers and OSes which makes using complicated passwords easier. It’s true that a hacker with your master password would own the keys to your life, but that’s often true in general: despite repeated requests to not have a single password, most people have a one or just a few passwords they reuse everywhere. This is a better way because you can focus on remembering one big password, add 2FA, and have unique, complex passwords everywhere else.
- ttoinou 8y agoNow hackers only need to focus on such application like password manager and they can impersonate you
- e12e 8y agoIf you are able to remember and type different passwords that encode 96-128 bits of entropy for all your services, logins and passphrase needs, without re-using a password or elements of it; then sure: it might be "more" secure to just use passwords. I haven't looked too closely at 1password - but with for example bitwarden the master password is used via kdf to encrypt all data client side. If you don't self-host - you're still just a single service away from compromise (an attacker could log the passphrase in a compromised client) - but on balance I'd say it's more secure than trying to memorize dozens or more strong passwords.
- tepidandroid 8y agoI've never understood the appeal of paid password management services like 1password. Is there any benefit to using this over something like KeePassXC + Dropbox?
- toomuchtodo 8y agoUsability. 1Password on my Mac and iPhones with iCloud as backing storage “just works”, and I trust iCloud more than Dropbox for secure storage. Disclaimer: Using 1Password 5, which was a one time payment.
- 0x7f800000 8y agoKeePassXC and Dropbox "just works," and it works on Windows, macOS, Linux, *BSD, Android, iOS, ... Dropbox can be swapped out with other storage services.
- deleted 8y ago[deleted]
- deleted 8y ago[deleted]
- msbarnett 8y ago> KeePassXC and Dropbox "just works," and it works on Windows, macOS, Linux, *BSD, Android, iOS, ... At least on iOS, this doesn't appear to be meaningfully true. With 1Password if I have navigated to a site's login page in Safari, all I need to do is hit the 1Password Activity button and it will populate my name and password. With "Keepass Touch for iOS" my options are either: "You're browsing wrong. If you want to log in to something, use the integrated browser" or "switch apps from safari to Keepass, copy username to clipboard, switch back to Safari, paste username, switch back to Keepass, copy password, switch back to Safari, paste." No thanks. This is still meaningfully behind in the usability department.
- Nullabillity 8y ago> secure storage The passwords should be encrypted at rest (and are with KeePassXC), so Dropbox' (or iCloud's, for that matter) security is irrelevant.
- cprecioso 8y agoI think this is in fact a good omen for the Standalone version of 1P. If Apple is going to be using that, you know they will not discontinue it as I was fearing they'll do some day or another.
- patagonia 8y agoCould someone please try to convince me why I should be using anything other than Bitwarden? In years past I’d exhaustively review my options for password manager. When LastPass was acquired by LogMeIn I stumbled upon Bitwarden and haven’t seen any news or commentary which has caused me to rethink that decision. Edit: zero affiliation with Bitwarden
- crispyambulance 8y agoWhy don't you convince us? 1Password seems to be OK. I use it and pay subscription. Except for frustrating login experiences with some websites, don't have any problems. Never heard of Bitwarden, doesn't seem particularly compelling compared to 1password.
- deleted 8y ago[deleted]
- tinus_hn 8y agoWhy wouldn’t they extend their own native password management tool instead?
- quanticle 8y agoThis is clickbait journalism at its worst. Let's look at the all the ways this story is designed to mislead and deceive: * Provocative headline, designed to attract attention * Use of the word "Exclusive" to imply that this is important information * Says acquisitions talks *are* underway, despite having little or no evidence of that * Reliance on anonymous second or third-hand sources - the only evidence for "acquisition" is something that an employee overheard the CEO say * Update, placed at the end of the story, that disconfirms the story * Placement on aggregator sites like Reddit and Hacker News in order to drive pageviews I rarely say this about stories on the frontpage, but in my opinion, this story should be flagged and deleted. There's no content here, and driving traffic to bgr rewards them for putting out this kind of fake news. This story reads like someone took Ryan Holiday's book, Trust Me I'm Lying and treated it as a field manual rather than a set of warnings.
- LyndsySimon 8y agoI'm hoping this leads to a better integration API for password managers in general on iOS. I use Bitwarden, and it's a real pain to log in to native apps using it - you have to copy/paste between the Bitwarden app and the app you're logging in to. I've spoken with the Bitwarden team and they indicated that it was a limitation of iOS and there wasn't anything they could do on their end.
- Svoka 8y agoMay be they're just testing iOS 12 third party password manager integration?