5 ms·

I've never understood the appeal of paid password management services like 1password. Is there any benefit to using this over something like KeePassXC + Dropbox

I've never understood the appeal of paid password management services like 1password. Is there any benefit to using this over something like KeePassXC + Dropbox?

toomuchtodo 8y ago
Usability. 1Password on my Mac and iPhones with iCloud as backing storage “just works”, and I trust iCloud more than Dropbox for secure storage. Disclaimer: Using 1Password 5, which was a one time payment.
- 0x7f800000 8y ago
  KeePassXC and Dropbox "just works," and it works on Windows, macOS, Linux, *BSD, Android, iOS, ... Dropbox can be swapped out with other storage services.
  - deleted 8y ago
    [deleted]
  - deleted 8y ago
    [deleted]
  - msbarnett 8y ago
    > KeePassXC and Dropbox "just works," and it works on Windows, macOS, Linux, *BSD, Android, iOS, ... At least on iOS, this doesn't appear to be meaningfully true. With 1Password if I have navigated to a site's login page in Safari, all I need to do is hit the 1Password Activity button and it will populate my name and password. With "Keepass Touch for iOS" my options are either: "You're browsing wrong. If you want to log in to something, use the integrated browser" or "switch apps from safari to Keepass, copy username to clipboard, switch back to Safari, paste username, switch back to Keepass, copy password, switch back to Safari, paste." No thanks. This is still meaningfully behind in the usability department.
- Nullabillity 8y ago
  > secure storage The passwords should be encrypted at rest (and are with KeePassXC), so Dropbox' (or iCloud's, for that matter) security is irrelevant.
- azinman2 8y ago
  Why is that? Dropbox has a pretty good record, no? And ultimately, the point is 1password’s db should be well encrypted so you don’t have to trust the underlying storage.
  - toomuchtodo 8y ago
    > Why is that? Dropbox has a pretty good record, no? Not so much. My creds were leaked in their 2012 breach. https://techcrunch.com/2011/06/20/dropbox-security-bug-made-passwords-optional-for-four-hours/ https://techcrunch.com/2011/06/20/dropbox-security-bug-made-... https://www.theguardian.com/technology/2016/aug/31/dropbox-hack-passwords-68m-data-breach https://www.theguardian.com/technology/2016/aug/31/dropbox-h...
    - azinman2 8y ago
      They’ve been around since 2007 and are an obviously juicy target. To me that’s pretty good.. even companies like google get hacked.... and that breach was 6 years ago? Any major breach since then?
      - deleted 8y ago
        [deleted]
- latexr 8y ago
  > Using 1Password 5, which was a one time payment. Version 6 was a free upgrade.
deleted 8y ago
[deleted]
dabeeeenster 8y ago
Browser integration tools, mobile apps, shared passwords.
- Nullabillity 8y ago
  > Browser integration tools https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/ https://addons.mozilla.org/en-US/firefox/addon/keepassxc-bro... > mobile apps https://play.google.com/store/apps/details?id=keepass2android.keepass2android&hl=en_US https://play.google.com/store/apps/details?id=keepass2androi... > shared passwords Cannot be done securely.
throwaway2016a 8y ago
You can also sync 1Password with Dropbox and avoid a subscription or the cloud service. It also has a neat feature where it can discover other peers on the network and auto-sync the password for use when the clients are offline. Overall, the quality of 1Password is amazing and I'm sure that had a lot to do with the fact they get paid to do it to. Open source is great and I don't know if KeePassXC has a revenue model but I personally think my money spent on 1Password was put to good user.

I've never understood the appeal of paid password management services like 1password. Is there any benefit to using this over something like KeePassXC + Dropbox?

toomuchtodo 8y ago

Usability. 1Password on my Mac and iPhones with iCloud as backing storage “just works”, and I trust iCloud more than Dropbox for secure storage. Disclaimer: Using 1Password 5, which was a one time payment.

0x7f800000 8y ago
KeePassXC and Dropbox "just works," and it works on Windows, macOS, Linux, *BSD, Android, iOS, ... Dropbox can be swapped out with other storage services.
- deleted 8y ago
  [deleted]
- deleted 8y ago
  [deleted]
- msbarnett 8y ago
  > KeePassXC and Dropbox "just works," and it works on Windows, macOS, Linux, *BSD, Android, iOS, ... At least on iOS, this doesn't appear to be meaningfully true. With 1Password if I have navigated to a site's login page in Safari, all I need to do is hit the 1Password Activity button and it will populate my name and password. With "Keepass Touch for iOS" my options are either: "You're browsing wrong. If you want to log in to something, use the integrated browser" or "switch apps from safari to Keepass, copy username to clipboard, switch back to Safari, paste username, switch back to Keepass, copy password, switch back to Safari, paste." No thanks. This is still meaningfully behind in the usability department.
Nullabillity 8y ago
> secure storage The passwords should be encrypted at rest (and are with KeePassXC), so Dropbox' (or iCloud's, for that matter) security is irrelevant.
azinman2 8y ago
Why is that? Dropbox has a pretty good record, no? And ultimately, the point is 1password’s db should be well encrypted so you don’t have to trust the underlying storage.
- toomuchtodo 8y ago
  > Why is that? Dropbox has a pretty good record, no? Not so much. My creds were leaked in their 2012 breach. https://techcrunch.com/2011/06/20/dropbox-security-bug-made-passwords-optional-for-four-hours/ https://techcrunch.com/2011/06/20/dropbox-security-bug-made-... https://www.theguardian.com/technology/2016/aug/31/dropbox-hack-passwords-68m-data-breach https://www.theguardian.com/technology/2016/aug/31/dropbox-h...
  - azinman2 8y ago
    They’ve been around since 2007 and are an obviously juicy target. To me that’s pretty good.. even companies like google get hacked.... and that breach was 6 years ago? Any major breach since then?
    - deleted 8y ago
      [deleted]
latexr 8y ago
> Using 1Password 5, which was a one time payment. Version 6 was a free upgrade.

deleted 8y ago

[deleted]

dabeeeenster 8y ago

Browser integration tools, mobile apps, shared passwords.

Nullabillity 8y ago
> Browser integration tools https://addons.mozilla.org/en-US/firefox/addon/keepassxc-browser/ https://addons.mozilla.org/en-US/firefox/addon/keepassxc-bro... > mobile apps https://play.google.com/store/apps/details?id=keepass2android.keepass2android&hl=en_US https://play.google.com/store/apps/details?id=keepass2androi... > shared passwords Cannot be done securely.

throwaway2016a 8y ago

You can also sync 1Password with Dropbox and avoid a subscription or the cloud service. It also has a neat feature where it can discover other peers on the network and auto-sync the password for use when the clients are offline. Overall, the quality of 1Password is amazing and I'm sure that had a lot to do with the fact they get paid to do it to. Open source is great and I don't know if KeePassXC has a revenue model but I personally think my money spent on 1Password was put to good user.