5 ms·

I rarely see it mentioned, but when 1Password changed to a subscription model I switched to Enpass (https://www.enpass.io https://www.enpass.io) and I've been v

I rarely see it mentioned, but when 1Password changed to a subscription model I switched to Enpass (https://www.enpass.io https://www.enpass.io) and I've been very happy with it.

sys_64738 8y ago
Me too. Enpass is great.
clairity 8y ago
they don't make it very obvious, but note that 1password doesn't require a subscription. i use it with vaults shared and kept in sync via dropbox for example.
- rrdharan 8y ago
  Same. I recently purchased an upgrade and consider it well worth the price, although I'm considering switching to the subscription model / family plan to make it easier to support my parents and in-laws. However my main concern is that you can't disable browser access when using ay of the subscription plans: https://discussions.agilebits.com/discussion/80105/cant-disable-web-browser-access-from-1password-com-to-unencrypted-passwords https://discussions.agilebits.com/discussion/80105/cant-disa...
  - clairity 8y ago
    yup, i don't use 1password.com because of those security concerns. not sure if it would work for your situation, but it's possible to set up different vaults for different groups of people and share them via separate dropbox folders (or even just different share settings on the vault files). i have 5 vaults set up that way.
  - eridius 8y ago
    I'm confused as to what the security issue is here. > Limiting the access of unencrypted passwords to only properly setup 1PW applications would seem to eliminate the possible (probable?) web based attack vector to a 1password.com account. This doesn't make sense. What's a "properly setup 1PW application"? Presumably that's an instance of 1Password that has been given both the master password and account key for the account. But when you use the web-based portal, you have to give it, yep, the master password and account key. Anyone who is able to access the passwords using the web portal can already set up a local instance of the 1PW application that syncs with the same account. Ultimately, asking to "disable browser access" is basically the same thing as asking to "disable the syncing API", which would obviously defeat the entire point of having the family account.
    - rrdharan 8y ago
      Right - I don't want 1Password to handle syncing and I don't want Dropbox handling / offering decryption of the encrypted store. I trust the local 1Password apps enough to supply them my master password to unlock vaults locally. I trust Dropbox enough to not sync the encrypted store somewhere I don't want it ending up. It's a separation of concerns argument. I likely won't hold up to any targeted attack on my personal property given how careless I am with local devices but I should be somewhat protected against a your typical dragnet / mass attack against either service remotely.
- chrisweekly 8y ago
  Same. Happy macos 1pwd user here.
dddw 8y ago
I switched from Enpass to Bitwarden because Enpass isn't open source. Enpass is easier to setup with dropbox though, only thing I miss about that.

I rarely see it mentioned, but when 1Password changed to a subscription model I switched to Enpass (https://www.enpass.io https://www.enpass.io) and I've been very happy with it.

sys_64738 8y ago

Me too. Enpass is great.

clairity 8y ago

they don't make it very obvious, but note that 1password doesn't require a subscription. i use it with vaults shared and kept in sync via dropbox for example.

rrdharan 8y ago
Same. I recently purchased an upgrade and consider it well worth the price, although I'm considering switching to the subscription model / family plan to make it easier to support my parents and in-laws. However my main concern is that you can't disable browser access when using ay of the subscription plans: https://discussions.agilebits.com/discussion/80105/cant-disable-web-browser-access-from-1password-com-to-unencrypted-passwords https://discussions.agilebits.com/discussion/80105/cant-disa...
- clairity 8y ago
  yup, i don't use 1password.com because of those security concerns. not sure if it would work for your situation, but it's possible to set up different vaults for different groups of people and share them via separate dropbox folders (or even just different share settings on the vault files). i have 5 vaults set up that way.
- eridius 8y ago
  I'm confused as to what the security issue is here. > Limiting the access of unencrypted passwords to only properly setup 1PW applications would seem to eliminate the possible (probable?) web based attack vector to a 1password.com account. This doesn't make sense. What's a "properly setup 1PW application"? Presumably that's an instance of 1Password that has been given both the master password and account key for the account. But when you use the web-based portal, you have to give it, yep, the master password and account key. Anyone who is able to access the passwords using the web portal can already set up a local instance of the 1PW application that syncs with the same account. Ultimately, asking to "disable browser access" is basically the same thing as asking to "disable the syncing API", which would obviously defeat the entire point of having the family account.
  - rrdharan 8y ago
    Right - I don't want 1Password to handle syncing and I don't want Dropbox handling / offering decryption of the encrypted store. I trust the local 1Password apps enough to supply them my master password to unlock vaults locally. I trust Dropbox enough to not sync the encrypted store somewhere I don't want it ending up. It's a separation of concerns argument. I likely won't hold up to any targeted attack on my personal property given how careless I am with local devices but I should be somewhat protected against a your typical dragnet / mass attack against either service remotely.
chrisweekly 8y ago
Same. Happy macos 1pwd user here.

dddw 8y ago

I switched from Enpass to Bitwarden because Enpass isn't open source. Enpass is easier to setup with dropbox though, only thing I miss about that.