5 ms·

I'm on the Catalina beta and the Safari Extension for 1Password 6 doesn't work (Apple only allows extensions from the App Store starting with Safari 13 - so it'

I'm on the Catalina beta and the Safari Extension for 1Password 6 doesn't work (Apple only allows extensions from the App Store starting with Safari 13 - so it's not really AgileBits fault). I chose to migrate to storing everything in iCloud Keychain instead. I understand why companies want to move to the subscription model, but I can't justify spending $36/year for an app to store my passwords.

jakebasile 7y ago
The problem with iCloud keychain for me is that I don't only use Apple devices, otherwise it might do the trick (except for TOTP 2FA stuff). I'm trying Bitwarden now and it seems to be ok. Maybe it's time for a change.
- valarauko 7y ago
  +1 for Bitwarden.
  - bert2002 7y ago
    +1
- alceta 7y ago
  As a user that made the switch to bitwarden the last time 1Password tried their shift to the membership-only options some 1-2 years ago, it is an excellent replacement. I do miss some better search / sorting functionality, but otherwise this works great with a local server that I maintain for keeping my Mac, Ubuntu, Windows and Android devices in sync.
  - Fnoord 7y ago
    Bitwarden costs only what is it 10 or 12 USD a year. LastPass costs 24 USD, and 1Password 36 USD. If you need 2FA. If you don't need 2FA then it doesn't cost as much, but I think you still have a device limit. Bitwarden's clients are FOSS. There's a 3rd party FOSS server for it available written in Ruby. So you could even self-host. [EDIT: there's one written in Rust as well! [1] [2]] [1] https://github.com/jcs/rubywarden https://github.com/jcs/rubywarden [2] https://github.com/dani-garcia/bitwarden_rs https://github.com/dani-garcia/bitwarden_rs
    - MrGilbert 7y ago
      You can also self-host the original server, it's under AGPL[0]. I'm using this atm, and yes, I pay for the organization feature, though I could easily adjust the code to unlock it. It just doesn't feel right (same goes for the 3rd party FOSS server). But that's just me. [0]: https://github.com/bitwarden/server https://github.com/bitwarden/server
      - Fnoord 7y ago
        Ah yes, but then you're bound to Windows, except that SQL Server runs in Docker too? Very cool company, regardless. They're even part of HackerOne [1]. [1] https://hackerone.com/bitwarden https://hackerone.com/bitwarden
    - pratnala 7y ago
      IIRC, LastPass increased to $36/yr which made me switch to Bitwarden. $10/yr with better functionality and UX
  - izacus 7y ago
    Does BitWarden support "family" use-cases, where you share passwords between multiple accounts?
    - yardie 7y ago
      Yes. Family plan is just $1/month for 5 users and self-hosting as an option. The free tier supports 2 users sharing.
  - george_perez 7y ago
    That would be a good option if they supported all of their clients equally, but the developer has pretty much said that he's not going to update the extension to support Safari 13. As a Safari user, it's not a good option.
- Razengan 7y ago
  > The problem with iCloud keychain for me is that I don't only use Apple devices If I ever need to sign into something on a non-Apple OS, I look up the desired iCloud KeyChain-stored password on my iPhone, then manually retype it on the other device. I feel that gives me extra security.
  - youareostriches 7y ago
    >...that gives me extra security Actually, manually typing or pasting your password (assuming you aren’t using WebAuthN) opens you up to phishing attacks because you could be fooled by the URL, whereas password managers and hardware tokens will activate only for the associated domain.
    - Razengan 7y ago
      I meant, I don't have to trust Windows or Android's security to not leak access into third-party password sharing apps, or the in-house security hygiene of those third-parties. With Apple there's only one party involved.
- speleding 7y ago
  Bitwarden will also stop working with Catalina / Safari 13 so that doesn't help this particular use case
  - ukd1 7y ago
    Seems to work fine, I installed Bitwarden yesterday
    - gnomewascool 7y ago
      https://github.com/bitwarden/browser/issues/664 https://github.com/bitwarden/browser/issues/664
      - ukd1 7y ago
        Ah, it works on Catalina. I don't use Safari.
  - krmbzds 7y ago
    That is not entirely true. Update: https://git.io/fjXLJ https://git.io/fjXLJ
- deleted 7y ago
  [deleted]
- krmbzds 7y ago
  +1 for Bitwarden
matwood 7y ago
> I chose to migrate to storing everything in iCloud Keychain instead. I did the same when 1Password moved in this direction after version 6. It was clear then that the stand alone version was going away.
cujo 7y ago
Correct me if I'm wrong, but you can't share passwords with iCloud Keychain, correct? My workflow involves sharing certain accounts with family members and 1Password supports that. For now, that's the killer feature for me.
- derefr 7y ago
  I share passwords with my coworkers (for resources that don’t support teams+sub-users) not by using any password manager, but rather by just keeping the descriptions+usernames+passwords in a Google Sheet. We use GSuite, but that isn’t really relevant other than for controlling default ACLs to the document; you can just make a private Sheet and then share it by email to whoever you like. Google Sheets works okay (for this use-case) pretty much everywhere you need it, including on mobile. Doesn’t auto-fill anything, of course, but since the point is sharing the password, not restricting the ACLs of the password in any enterprise sense (i.e. so people that could use a password before can then lose access to it), it’s fine to allow people to just cache the password into iCloud Keychain and/or Chrome Sync. So it’s not as much of a speed bump as you’d think.
  - cujo 7y ago
    I can appreciate that it works, but that solution is objectively worse for me. There's no convenience, it's more work, more error prone, and still a "cloud" storage solution with all its inherent issues. I can punt on the cloud problems, but I'll pay for the convenience of a password manager in this case.
techslave 7y ago
> can't justify spending $36/year for an app to store my passwords. what? it’s not just storing your passwords. you could use a spreadsheet or plain text file for that. $36/yr is NOTHING. this is great value for money.

jakebasile 7y ago

The problem with iCloud keychain for me is that I don't only use Apple devices, otherwise it might do the trick (except for TOTP 2FA stuff). I'm trying Bitwarden now and it seems to be ok. Maybe it's time for a change.

valarauko 7y ago
+1 for Bitwarden.
- bert2002 7y ago
  +1
alceta 7y ago
As a user that made the switch to bitwarden the last time 1Password tried their shift to the membership-only options some 1-2 years ago, it is an excellent replacement. I do miss some better search / sorting functionality, but otherwise this works great with a local server that I maintain for keeping my Mac, Ubuntu, Windows and Android devices in sync.
- Fnoord 7y ago
  Bitwarden costs only what is it 10 or 12 USD a year. LastPass costs 24 USD, and 1Password 36 USD. If you need 2FA. If you don't need 2FA then it doesn't cost as much, but I think you still have a device limit. Bitwarden's clients are FOSS. There's a 3rd party FOSS server for it available written in Ruby. So you could even self-host. [EDIT: there's one written in Rust as well! [1] [2]] [1] https://github.com/jcs/rubywarden https://github.com/jcs/rubywarden [2] https://github.com/dani-garcia/bitwarden_rs https://github.com/dani-garcia/bitwarden_rs
  - MrGilbert 7y ago
    You can also self-host the original server, it's under AGPL[0]. I'm using this atm, and yes, I pay for the organization feature, though I could easily adjust the code to unlock it. It just doesn't feel right (same goes for the 3rd party FOSS server). But that's just me. [0]: https://github.com/bitwarden/server https://github.com/bitwarden/server
    - Fnoord 7y ago
      Ah yes, but then you're bound to Windows, except that SQL Server runs in Docker too? Very cool company, regardless. They're even part of HackerOne [1]. [1] https://hackerone.com/bitwarden https://hackerone.com/bitwarden
  - pratnala 7y ago
    IIRC, LastPass increased to $36/yr which made me switch to Bitwarden. $10/yr with better functionality and UX
- izacus 7y ago
  Does BitWarden support "family" use-cases, where you share passwords between multiple accounts?
  - yardie 7y ago
    Yes. Family plan is just $1/month for 5 users and self-hosting as an option. The free tier supports 2 users sharing.
- george_perez 7y ago
  That would be a good option if they supported all of their clients equally, but the developer has pretty much said that he's not going to update the extension to support Safari 13. As a Safari user, it's not a good option.
Razengan 7y ago
> The problem with iCloud keychain for me is that I don't only use Apple devices If I ever need to sign into something on a non-Apple OS, I look up the desired iCloud KeyChain-stored password on my iPhone, then manually retype it on the other device. I feel that gives me extra security.
- youareostriches 7y ago
  >...that gives me extra security Actually, manually typing or pasting your password (assuming you aren’t using WebAuthN) opens you up to phishing attacks because you could be fooled by the URL, whereas password managers and hardware tokens will activate only for the associated domain.
  - Razengan 7y ago
    I meant, I don't have to trust Windows or Android's security to not leak access into third-party password sharing apps, or the in-house security hygiene of those third-parties. With Apple there's only one party involved.
speleding 7y ago
Bitwarden will also stop working with Catalina / Safari 13 so that doesn't help this particular use case
- ukd1 7y ago
  Seems to work fine, I installed Bitwarden yesterday
  - gnomewascool 7y ago
    https://github.com/bitwarden/browser/issues/664 https://github.com/bitwarden/browser/issues/664
    - ukd1 7y ago
      Ah, it works on Catalina. I don't use Safari.
- krmbzds 7y ago
  That is not entirely true. Update: https://git.io/fjXLJ https://git.io/fjXLJ
deleted 7y ago
[deleted]
krmbzds 7y ago
+1 for Bitwarden

matwood 7y ago

> I chose to migrate to storing everything in iCloud Keychain instead. I did the same when 1Password moved in this direction after version 6. It was clear then that the stand alone version was going away.

cujo 7y ago

Correct me if I'm wrong, but you can't share passwords with iCloud Keychain, correct? My workflow involves sharing certain accounts with family members and 1Password supports that. For now, that's the killer feature for me.

derefr 7y ago
I share passwords with my coworkers (for resources that don’t support teams+sub-users) not by using any password manager, but rather by just keeping the descriptions+usernames+passwords in a Google Sheet. We use GSuite, but that isn’t really relevant other than for controlling default ACLs to the document; you can just make a private Sheet and then share it by email to whoever you like. Google Sheets works okay (for this use-case) pretty much everywhere you need it, including on mobile. Doesn’t auto-fill anything, of course, but since the point is sharing the password, not restricting the ACLs of the password in any enterprise sense (i.e. so people that could use a password before can then lose access to it), it’s fine to allow people to just cache the password into iCloud Keychain and/or Chrome Sync. So it’s not as much of a speed bump as you’d think.
- cujo 7y ago
  I can appreciate that it works, but that solution is objectively worse for me. There's no convenience, it's more work, more error prone, and still a "cloud" storage solution with all its inherent issues. I can punt on the cloud problems, but I'll pay for the convenience of a password manager in this case.

techslave 7y ago

> can't justify spending $36/year for an app to store my passwords. what? it’s not just storing your passwords. you could use a spreadsheet or plain text file for that. $36/yr is NOTHING. this is great value for money.