45 ms·

1Password for Linux

392 points by grappler 5y ago

ed25519FUUU 5y ago
Is this a subscription only feature?
- c0wb0yc0d3r 5y ago
  As far as I know, 1Password does not have a free tier.
  - hamburglar 5y ago
    They used to have a paid tier where you just pay for the software outright and use it offline. They have been making it harder and harder to find every release, so it may not exist anymore.
  - bwoodruff 5y ago
    Mostly true, though this may be of interest: https://github.com/1Password/1password-teams-open-source https://github.com/1Password/1password-teams-open-source :) - Ben, 1Password
- hamburglar 5y ago
  If history is any indicator, they will say it’s not subscription only while simultaneously leaving all the docs and kb articles on their website in a state that makes it sound like it’s subscription only. They don’t really want non-subscription customers, but they don’t want to say that outright. This has been clear for years and is the reason I’ve given up despite thinking their (non-subscription) product is worth the money. It just feels like they are always on the verge of dropping support for it.
  - waheoo 5y ago
    Just use bitwarden. Open source and the only thing that you'd really want to pay the 10/year for is 2fa integration.
- heleninboodler 5y ago
  According to this forum post I just found[1], they are "no longer advertising" the non-subscription mode, and they apparently will not directly answer questions about whether it's still sold: >> "We're no longer advertising standalone licenses" Does that mean "We're no longer offering standalone licenses"? > Membership [aka subscription-based] is the way forward with 1Password. It's really disappointing that their communication is so transparently evasive on this point. [1] https://1password.community/discussion/116659/how-to-switch-from-subscription-to-standslone-license https://1password.community/discussion/116659/how-to-switch-...
  - bwoodruff 5y ago
    We continue to sell licenses for each 1Password 7 for Mac and 1Password 7 for Windows. These licenses are available within the app when downloaded from our website. We would strongly recommend 1Password membership as that is going to provide the best experience, but if you’d prefer a license for one or both of those products they are for sale. We recommend memberships as they address a number of requests our customers had that we were unable to accommodate without connecting to a server to perform the heavy lifting, such as 2FA, sharing, etc. It also significantly simplifies the purchasing experience: a subscription includes access to the latest versions of all the 1Password apps. You can read more here: https://support.1password.com/explore/membership/ https://support.1password.com/explore/membership/ - Ben, 1Password
    - 0x5f3759df-i 5y ago
      As a standalone license customer for almost 10 years now, the constant responses like this and the deliberate non-answers on the forums really make me wonder how long I will continue to use 1password. I love 1password but I will not put my passwords in someone else's cloud. It's honestly pretty insulting that every time this comes up, someone from 1password pops in to talk down to your customers and push subscriptions. I understand the business reasons of why you want subscription revenue, but pretending that you're pushing subscriptions for the good of your customer is just so transparently false. It's good for your bottom line, just own it.
- bwoodruff 5y ago
  Yes, 1Password for Linux requires a 1Password membership. You can subscribe to any of our individual, family, or team accounts yourself, or if your company subscribes to 1Password Business you'll get your own family account for free. Regardless of how you subscribe you'll always have access to your data as each client has a local cache for offline use and your account remains active even in the event your subscription lapses. If you have any questions or feedback please feel free to reach out to us directly at support+linux@1password.com - Ben, 1Password
pjmlp 5y ago
Yes, it is yet another Electron app. https://github.com/1password/electron-hardener https://github.com/1password/electron-hardener
- yannoninator 5y ago
  yes but it uses rust so it's all fine.
  - outadoc 5y ago
    Hacker News is gonna be torn on this one :)
    - chaorace 5y ago
      Might be a good litmus test for front-end developers Vs. back-end developers
      - steveklabnik 5y ago
        Plot twist: they use Rust as wasm in the browser extension, so it's a front-end thing as well as a backend one https://blog.1password.com/1passwordx-december-2019-release/ https://blog.1password.com/1passwordx-december-2019-release/
- wyuenho 5y ago
  I'm just surprised people call Electron apps "native" now.
  - hn8788 5y ago
    I think it's just marketing. The devs where I work started promoting everything that isn't a web page as "native", and web pages that don't have external dependencies as "static", even though they are still dynamic apps loaded with javascript.
  - fastball 5y ago
VadimPR 5y ago
This is fantastic and this is just about how you should do your Linux product.
ramboldio 5y ago
Have used 1Password before they had a client on linux and I have to say: I'm very relived now that I can now authenticate with my system keyring and not by entering my master password into a browser extension. (also much more convenient, can even use my fingerprint reader, if I wanted. On Linux!) (should be a browser feature)
- bwoodruff 5y ago
  Thanks for the kind words! Glad to hear it is working out. We have beta support for mutual unlock of the Linux app and browser extension so you can unlock in the browser using your fingerprint. You can check it out here: https://1password.community/discussion/120745/a-better-way-to-unlock https://1password.community/discussion/120745/a-better-way-t... - Ben, 1Password
  - CamJN 5y ago
    Just a warning for people who don't know the parent is referring to the extension formerly called 1Password X (now just 1Password in the browser because AgileBits wants you to use that one) which puts ALL OF YOUR PASSWORDS into your browser's memory.
    - Qub3d 5y ago
      This is an interesting concern, and you've pasted this identical comment at least three times in this thread. Could you elaborate or link to somewhere that explains this in detail? This comment on its own isn't very helpful.
      - CamJN 5y ago
        This comment by me was wrong, sorry everyone. They’re NOT doing stupid crazy things.
        roustem 5y ago
        > They do not say that they do not decrypt your entire vault into browser memory, because they do. I am sorry but this is just wrong. I have close to 6,000 items in my 1Password across family and business accounts. Loading everything into memory all the time would be ridiculous.
1cvmask 5y ago
We at saas pass authenticator and password manager solved the linux support by building a comprehensive browser extension application that does not require a desktop app at all. It is a different approach eliminating the need for a local client. All the major browsers on Linux are supported including chromium. (helped with design of the browser extension)
- bassdropvroom 5y ago
  Sure, but a browser extension cannot handle anything outside the browser. Which for many is fine, but there are still plenty of individuals who need that outside the of the browser.
  - 1cvmask 5y ago
    Absolutely correct. For those edge cases there is a copy/paste available from the web portal or browser extension.
    - bassdropvroom 5y ago
      Pretty much all password managers I've used have had this. I see having to copy and paste more as a workaround for a missing desktop client rather than a solution.
rvz 5y ago
What a scam. All this hype and it is another Electron app. Windows and Mac versions are native and yet Linux gets a version that uses 'Electron'. Yuck. Fortunately, to give us the illusion that it is 'fast' they need to mention that it uses 'Rust'. And?
- f00zz 5y ago
  I wonder if Qt developers are that hard to find.
  - konart 5y ago
    How many widely used Qt\GTK apps can you name if we are talking about general market and not just linux tools build by developers for developers? I can name Krita and that's about it. So... yeah, I guess finding a professional skilled in Qt or GTK might be problem. And honestly - why bother?
    - f00zz 5y ago
      Telegram, Maya, Ableton Live?
      - konart 5y ago
        See - now we know were all those Qt devs are :)
- wbkang 5y ago
  It specifically calls out many the native integration features. What are you looking for in non electron apps that is missing in this version of app?
  - rvz 5y ago
    How does calling 'native integration features' make it 'native'?. If the whole app is running in a 'browser' (which is exactly what Electron apps do) it is not a native app. 1Password 7 on my Mac is a native app. > What are you looking for in non electron apps that is missing in this version of app? In general. That fact that I don't need to upgrade the RAM of my computer to run multiple apps at the same time. I can do that with native apps perfectly but not with downloading and using tons of Electron apps. Has to be close one app and open another or else the computer grinds to a halt. Adding one more Electron app to the mix (Regardless of using 'Rust') makes it a step closer to running my computer to the ground.
clircle 5y ago
I've just switched to KeePassXC from bitwarden in the last month, and the experience has been pretty bad. My main complaint is that KeepassXC-browser can't recognize maybe 30-50% of login fields, and the autotype shortcuts seem to be broken in Firefox. Maybe I can switch to 1Password.
- PascLeRasc 5y ago
  1Password works so much better for me than KeepassXC, especially in Firefox auto fill. But so did Bitwarden. Both are great options.
- philliphaydon 5y ago
  Why did you switch from bit warden?
  - clircle 5y ago
    My wife was spoked that all my passwords were in the cloud and asked me to start using a local PW manager.
yxhuvud 5y ago
I've had the beta installed a long time but it stopped working a week or two ago. Perhaps I need to reinstall or something now that the main version is live? EDIT: Nope, still can't login. Bleh.
- yabones 5y ago
  I think something was borked in the config/sqlite db a few updates ago when the 'native' auth parts were added. I was bitten with the same bug. Nuking the `.config/1Password` directory and re-adding my account seemed to work. Not a great solution, but it's worked fine since.
  - hartjer 5y ago
    Thanks for the guidance
  - yxhuvud 5y ago
    Many thanks, it worked.
- bwoodruff 5y ago
  Really sorry to hear about that. You may've missed a database migration during the beta period. Please reach out to us and we'll be happy to help. support+linux@1password.com - Ben, 1Password
- jtdressel 5y ago
  Were you able to update to 8.0.34? We recently moved the deb and rpm repositories to prepare for this release. Installing the deb or rpm from https://1password.com/downloads/linux/ https://1password.com/downloads/linux/ should setup the correct repo for future updates. If you have 8.0.34, and still can't log-in you may be experiencing the issue yabones described. support@1password.com can provide you with more hands-on help. (Disclosure: I work at 1Password)
  - yxhuvud 5y ago
    Yes, after applying the solution provided by yabones everything seems to work. Thanks anyhow :)
bognition 5y ago
I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we share with the kids too) I get that people bristle about SaaS subscriptions in their personal life but the $60/year it costs is well worth it. The research shows that strong passwords and limiting re-use is extremely effective at preventing account compromises and 1Password makes this dead simple. The thing that finally made it an incredible app was when Apple finally allowed 3rd party password management in iOS. Yes there might be better password managers out there and they might have better security. However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux.
- progx 5y ago
  Bitwarden https://bitwarden.com/ https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for 1password for linux and switched last year to bitwarden. Family Account for 6 Users ($40 per year)
  - bitlevel 5y ago
    Moving from 1Password to Bitwarden was the best thing I did. Bitwarden enabled me to use it with Linux, Mac, Windows, Web, etc. _years_ before 1Password decided to join the party. And there's no subscription to speak of - just a premium "extra features you may or may not want" yearly payment, which works out _much_ cheaper. Finally - all my passwords belong to me. Self hosted server means that I keep control, not some random cloud.
    - throwaway8581 5y ago
      Since Bitwarden is end-to-end encrypted, the risk isn't who hosts the data but who controls chrome extension and App Store updates. Bitwarden's servers being compromised would cause you no harm except data loss, but a malicious client update could steal all of your passwords.
rubyist5eva 5y ago
FINALLY - I've been making due with 1Password X in the browser, but having the app itself will be much more convenient.
OttPeterR 5y ago
Even though we’re a Bitwarden family, I’m happy to see other password managers supporting Linux, the world needs more native Linux support in their applications! Edit: not too happy about electron, but it’s still a step in the right direction for the common folk who use Ubuntu and aren’t the most tech savvy and just don’t care
- ziml77 5y ago
  Bitwarden is also Electron, at least on MacOS. I discovered that when I wanted to mass-delete entries and Cmd-A selected a bunch of random text on screen (including the hint text in the search box...). Was able to confirm by pressing F12 which brought up the dev tools.
- onedr0p 5y ago
  Isn't Bitwarden electron on all desktop platforms?
f00zz 5y ago
I just use pass: https://www.passwordstore.org/ https://www.passwordstore.org/
- sam_lowry_ 5y ago
  gopass [1] is a 100% compatible pass implementation that has some collaboration features added. However, I primarily use it for the `gopass search` output. This is where `pass` really sucks for those who copy-paste. [1] https://github.com/gopasspw/gopass https://github.com/gopasspw/gopass
  - creese 5y ago
    find ~/.password-store -name '*.gpg' -printf '%P\n' | sed -e 's:.gpg$::gi' | fzf | xargs pass -c There is also an extension: https://github.com/ficoos/pass-fzf https://github.com/ficoos/pass-fzf
    - sam_lowry_ 5y ago
      Good point, but `pacman -S gopass` is wa-a-ay easier ;-)
      - creese 5y ago
        I use a bash function: pass () { if [ $# -eq 0 ] || ( [ $# -eq 1 ] && [ $1 = "-c" ] ); then find ~/.password-store -name '\*.gpg' -printf '%P\n' | sed -e 's:.gpg$::gi' | fzf | xargs /usr/local/bin/pass $@; else /usr/local/bin/pass $@; fi } pass + fzf + bash > gopass. DOTADIW.
- drstewart 5y ago
  Correct. For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using pass on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.
waheoo 5y ago
You mean bitwarden?
tzs 5y ago
Interesting: > 1Password for Linux also debuts with several features that are coming soon to 1Password for Mac, Windows, iOS, and Android That should be encouraging for Linux users. It suggests that the Linux version is not just a port that will forever at best follow the other platforms. It can get pretty annoying when you have something that is available on multiple platforms, and your platform tends to always lag the others.
- leejoramo 5y ago
  This does look amazing. Reading the announcement show a level of deep integration not just for Linux, but for individual distributions and UI’s.
  - RenePardo 5y ago
    Rich Harris has it right. LANPAR is in fact the world's first electronic spreadsheet. The inventors/creators also invented implementing Forward Referencing - the cornerstone of spreadsheets. This was in 1969, ten years before Visicac and 14 years before Lotus 1-2-3. LANPAR was used extensively for Plant Budgeting operations across every telephone company in North America throughout the early 70's. VisiCalc, SuperCalc and TKSolver did not have Forward referencing. You had to manually refresh the screen (recalculate the entire spreadsheet) and watch to see when cells stopped changing values (if they needed results from cells further in the spreadsheet (left to right, top to bottom). Lotus 1-2-3 did have Forward Referencing. Multiplan I, did not and accordingly could not hurt Lotus until MultiPlan II incorporated it. I had communications from magazine editor(s) who simply had not been aware of LANPAR because it was so far ahead of its time, and 10 years later VisiCalc implemented its spreadsheet on Apple's microcomputer - popularizing spreadsheets at a consumer level. So Yes, Rich Harris got it totally 100% right!!
- apozem 5y ago
  1Password in Firefox unlocking the desktop app caught my eye. I'm on Mac and have to unlock 1Password in Firefox completely separately from the desktop Mac app.
  - 5y ago
Jeff_Brown 5y ago
If I ever move to Brazil, I look forward to welcoming all of Brazil to my family. I'm not sure how they get by alone.
xiaomai 5y ago
I love seeing all the proper integration with gnome/kernel/etc. Props to the 1password team.
hartjer 5y ago
As a user of their linux client, the experience so far has been pretty miserable. Is this a new client?
- dieortin 5y ago
  Yes, it was beta until now. What was it that didn’t work for you? I’ve had a perfect experience myself.
htatche 5y ago
Cool, just swapped the sandboxed one for this version, it feels snappy!
AnonHP 5y ago
PSA: Note that AgileBits intentionally hides the standalone license option and pushes subscription as the only visible scheme to get the application. This is a long standing dark pattern, and though the support staff will admit on their forums or here that the standalone license does exist, you wouldn't be able to find it without some special incantations on the forums. They will keep reiterating that it's for your own good so that you don't get confused. The application UX may be great. The sync may be great. The security of the closed source application may be great (because of audits). But this single dark pattern and the condescending attitude of their team members whenever the topic of standalone license comes up are enough to avoid this company. If you can get to the standalone license purchase option within three or four clicks from the main site, do let me know. I switched out of 1Password to Bitwarden long ago. I will admit that Bitwarden is not fantastic (I find it somewhat slow and also lacking some features). But it doesn't use dark patterns like AgileBits does.
- Mister_Snuggles 5y ago
  The sync story bothers me. In my mind, Enpass is one that does it correctly. They don't offer a sync service, instead they let you choose from a number of popular ones (OneDrive, Dropbox, iCloud, and a few others), one of which you probably already use. There's no need for yet another cloud service to solve this already solved problem.
  - jacurtis 5y ago
    I used the standalone option for 1Password for many years. They too allow the same thing. I would store my 1Password vault on Dropbox, which effectively handled the sync for me.
  - blaydator 5y ago
    That’s the feature that made me switched to Enpass as well. Between the licence thing and pushing the subscription, I have lost trust in 1Password, even if it (still) offer the drop sync as well.
  - ngrilly 5y ago
    I used to think like that but syncing files and syncing passwords across multiple devices are different things, mainly because of conflict management. If you have a conflict on a file which has been modified on two devices, there is not that much do you can do except using the most recent update based on timestamps and keeping the other one as a backup file. Dropbox does that for example. For password entries, it’s possible to be much master and do the same per entry, and even merge the fields within an entry. To do this in a reliable way on a remote file system, I think a file locking or a compare and swap mechanism is required. Another constraint with using a file sync service is this is introducing a kitchen and egg problem when we lose everything. We first need to restore access to the file sync service to then be able to recover the password file. Which means we can’t use the password manager for the file sync service. Not a deal breaker, as it is what I’m currently doing, but I’ve always wondered how it would go after a catastrophe like losing everything in a home fire.
WesolyKubeczek 5y ago
Sorry 1Password, it took you so long to make this move that I had sold my soul to LastPass in the meantime.
- roustem 5y ago
  :(
- qntty 5y ago
  I just switched to 1Password from LastPass after LastPass recently restructured their pricing, and it was very smooth. Just imported by passwords and they all worked.
- dteare 5y ago
  Sorry it took us so long! We'll do our best to win you back. <3 ++dave; 1Password Founder
connorlay 5y ago
Congrats to the 1Password team! I've been using the beta for a while now on Pop_OS! and it has been getting better with each update. I personally don't mind that it uses Electron. The app feels snappy to me and it looks like their engineers are making efforts to optimize the experience.
blaydator 5y ago
I have always wondered why we can’t make visible the master password when typing it. My master is very long (pass phrase) and I have to type it very carefully, it’s even harder on mobile. Such a pain ! Isn’t it a basic UX pattern to allow the user to show/hide the password as type it (with the popular eye icon at the end of the password input) ? Am I missing something ? Is this not present for security reason ?
- roustem 5y ago
  It is a protection from "shoulder-surfing". I agree with you, there has to be an option to reveal the password if needed.
- benhurmarcel 5y ago
  I agree, a button next to the field would be nice. I'm most often alone while typing the master password, it would save me a lot of tries.
______- 5y ago
1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible? Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me. [0] https://1password.com/sign-up/ https://1password.com/sign-up/
- pseudalopex 5y ago
  The apps become read only. I don't know if you can access the web version.
  - bwoodruff 5y ago
    You would also still have read-only access through the web app. :) - Ben, 1Password
- curiousgal 5y ago
  You still get read-only access. Where you can no longer add or edit your entries.
- beyer 5y ago
  Your data is yours. Even if you cancel your subscription and your account is frozen[0], you can still sign in to 1Password.com or in the apps to view and export your data. [0] https://support.1password.com/frozen-account/ https://support.1password.com/frozen-account/
  - ______- 5y ago
    Thanks for this ;)
dathinab 5y ago
The problem I see is that their Linux Keying integration is as far as I can tell done in a way it's not supposed to be used by anything and as such they need to ship with a SUID binary helper, basically a (hopefully) harmless root backdoor. (And I'm not speaking about the chrome/electrone sandbox, which can be run without SUID on modern systems).
- ag_christian 5y ago
  Do you mind expanding on why its problematic? We've built the kernel keyring integrations primarily to power the browser integration feature. In this case, "anything" ranges from users curious how it works to malware looking to steal credentials. 1Password puts in effort where possible to defend against attacks on your local system, so we need the keys currently used as part of the kernel keyring integration to be inaccessible to anything in userspace or otherwise some malware could steal credentials going back/forth to the browser. The SUID binary helper is unfortunate, but you can blame Linux for that. Our integration makes extensive use of the KEYCTL_CHOWN and KEYCTL_SETPERM syscalls for the reasons stated above, but a process needs the `CAP_SYS_ADMIN` capability to call them (ctrl+f on the man page for capabilities). In the end, we decided that making it SUID was more transparent to users then giving it that capability on install since the former is more visible.
filereaper 5y ago
What's the password recovery process like with 1Password for family accounts? I'm the administrator for my family's account on LastPass and my wife forgot her master password and has now burned the associated email. The account was unused and empty so nothing was lost but it highlighted to me that account recovery was not smooth or seamless. As an administrator you can't just issue a password reset on their behalf. If you're testing out these password managers, try a recovery first with a burner account before fully entrusting them with valuable passwords.
- kelnos 5y ago
  If it were possible to recover lost passwords as in your wife's case, then I absolutely would not trust the service at all. If you forget your master password, the passwords contained must be unrecoverable at that point. If they aren't, then that means the server/service has access to your plaintext passwords, and that is (or at least should be) an unacceptable security risk.
  - Hackbraten 5y ago
    The server never gets to see your master password nor the vault key. Every client has a public/private key pair. The private key grants access to the (symmetric) vault key and will never leave your device. At vault creation time, a copy of the vault key is encrypted using the public key of the recovery group and then stored on the server. The only secret the server ever sees is the secret (device) ID, and that’s by design.
- Hackbraten 5y ago
  > What's the password recovery process like with 1Password for family accounts? Short answer: When 1Password creates an encrypted vault, it will make a copy of the key, encrypt it with the public key of another family member (e.g. you) and hold the encrypted result in escrow on 1Password’s servers. If your wife forgets her master password and chooses to request recovery, a special procedure starts. First, 1Password asks you to confirm that the request is legit. If you confirm, the server will delete and re-create your wife’s account, then send you her new public key and the encrypted escrow key. Your app uses your private key to decrypt it. (Now your app has your wife’s vault key.) Your app re-encrypts it with her new public key, uploads the result and forgets the key. Finally, the server sends your wife her encrypted vault together with the thing your app just did. Now your wife can access her vault again. Long answer: see 1Password’s security white paper [1]. [1]: https://1password.com/files/1Password-White-Paper.pdf https://1password.com/files/1Password-White-Paper.pdf
benhurmarcel 5y ago
This is great. Is there any hope of having the possibility to export entries? Looks like it's missing compared to Windows and Mac.
- dteare 5y ago
  Yup! Since the very beginning in 2006 Roustem and I wanted to make sure everyone used 1Password because they enjoyed doing so and not because of being locked in. File > Export is your friend. ++dave; 1Password Founder
  - benhurmarcel 5y ago
    Thanks, I use Ubuntu so I missed that there was a menu bar. It's hidden unless I hit "Alt".
twobitshifter 5y ago
I use StrongBox Pro for managing a keepass database stored on iCloud. I highly recommend the app. StrongBox Pro offers a lifetime ios license for $45 and syncs well with iCloud, while giving you all the features of the more popular apps. My passwords are safe in the keepass file and I know that I'll always be able to open it and back them up wherever I want. Sometimes simpler is better, this is just a single person operation implementing an open format for password management.

1Password for Linux

392 points by grappler 5y ago

ed25519FUUU 5y ago

Is this a subscription only feature?

c0wb0yc0d3r 5y ago
As far as I know, 1Password does not have a free tier.
- hamburglar 5y ago
  They used to have a paid tier where you just pay for the software outright and use it offline. They have been making it harder and harder to find every release, so it may not exist anymore.
- bwoodruff 5y ago
  Mostly true, though this may be of interest: https://github.com/1Password/1password-teams-open-source https://github.com/1Password/1password-teams-open-source :) - Ben, 1Password
hamburglar 5y ago
If history is any indicator, they will say it’s not subscription only while simultaneously leaving all the docs and kb articles on their website in a state that makes it sound like it’s subscription only. They don’t really want non-subscription customers, but they don’t want to say that outright. This has been clear for years and is the reason I’ve given up despite thinking their (non-subscription) product is worth the money. It just feels like they are always on the verge of dropping support for it.
- waheoo 5y ago
  Just use bitwarden. Open source and the only thing that you'd really want to pay the 10/year for is 2fa integration.
heleninboodler 5y ago
According to this forum post I just found[1], they are "no longer advertising" the non-subscription mode, and they apparently will not directly answer questions about whether it's still sold: >> "We're no longer advertising standalone licenses" Does that mean "We're no longer offering standalone licenses"? > Membership [aka subscription-based] is the way forward with 1Password. It's really disappointing that their communication is so transparently evasive on this point. [1] https://1password.community/discussion/116659/how-to-switch-from-subscription-to-standslone-license https://1password.community/discussion/116659/how-to-switch-...
- bwoodruff 5y ago
  We continue to sell licenses for each 1Password 7 for Mac and 1Password 7 for Windows. These licenses are available within the app when downloaded from our website. We would strongly recommend 1Password membership as that is going to provide the best experience, but if you’d prefer a license for one or both of those products they are for sale. We recommend memberships as they address a number of requests our customers had that we were unable to accommodate without connecting to a server to perform the heavy lifting, such as 2FA, sharing, etc. It also significantly simplifies the purchasing experience: a subscription includes access to the latest versions of all the 1Password apps. You can read more here: https://support.1password.com/explore/membership/ https://support.1password.com/explore/membership/ - Ben, 1Password
  - 0x5f3759df-i 5y ago
    As a standalone license customer for almost 10 years now, the constant responses like this and the deliberate non-answers on the forums really make me wonder how long I will continue to use 1password. I love 1password but I will not put my passwords in someone else's cloud. It's honestly pretty insulting that every time this comes up, someone from 1password pops in to talk down to your customers and push subscriptions. I understand the business reasons of why you want subscription revenue, but pretending that you're pushing subscriptions for the good of your customer is just so transparently false. It's good for your bottom line, just own it.
bwoodruff 5y ago
Yes, 1Password for Linux requires a 1Password membership. You can subscribe to any of our individual, family, or team accounts yourself, or if your company subscribes to 1Password Business you'll get your own family account for free. Regardless of how you subscribe you'll always have access to your data as each client has a local cache for offline use and your account remains active even in the event your subscription lapses. If you have any questions or feedback please feel free to reach out to us directly at support+linux@1password.com - Ben, 1Password

pjmlp 5y ago

Yes, it is yet another Electron app. https://github.com/1password/electron-hardener https://github.com/1password/electron-hardener

yannoninator 5y ago
yes but it uses rust so it's all fine.
- outadoc 5y ago
  Hacker News is gonna be torn on this one :)
  - chaorace 5y ago
    Might be a good litmus test for front-end developers Vs. back-end developers
    - steveklabnik 5y ago
      Plot twist: they use Rust as wasm in the browser extension, so it's a front-end thing as well as a backend one https://blog.1password.com/1passwordx-december-2019-release/ https://blog.1password.com/1passwordx-december-2019-release/
wyuenho 5y ago
I'm just surprised people call Electron apps "native" now.
- hn8788 5y ago
  I think it's just marketing. The devs where I work started promoting everything that isn't a web page as "native", and web pages that don't have external dependencies as "static", even though they are still dynamic apps loaded with javascript.
- fastball 5y ago

VadimPR 5y ago

This is fantastic and this is just about how you should do your Linux product.

ramboldio 5y ago

Have used 1Password before they had a client on linux and I have to say: I'm very relived now that I can now authenticate with my system keyring and not by entering my master password into a browser extension. (also much more convenient, can even use my fingerprint reader, if I wanted. On Linux!) (should be a browser feature)

bwoodruff 5y ago
Thanks for the kind words! Glad to hear it is working out. We have beta support for mutual unlock of the Linux app and browser extension so you can unlock in the browser using your fingerprint. You can check it out here: https://1password.community/discussion/120745/a-better-way-to-unlock https://1password.community/discussion/120745/a-better-way-t... - Ben, 1Password
- CamJN 5y ago
  Just a warning for people who don't know the parent is referring to the extension formerly called 1Password X (now just 1Password in the browser because AgileBits wants you to use that one) which puts ALL OF YOUR PASSWORDS into your browser's memory.
  - Qub3d 5y ago
    This is an interesting concern, and you've pasted this identical comment at least three times in this thread. Could you elaborate or link to somewhere that explains this in detail? This comment on its own isn't very helpful.
    - CamJN 5y ago
      This comment by me was wrong, sorry everyone. They’re NOT doing stupid crazy things.
      - roustem 5y ago
        > They do not say that they do not decrypt your entire vault into browser memory, because they do. I am sorry but this is just wrong. I have close to 6,000 items in my 1Password across family and business accounts. Loading everything into memory all the time would be ridiculous.

1cvmask 5y ago

We at saas pass authenticator and password manager solved the linux support by building a comprehensive browser extension application that does not require a desktop app at all. It is a different approach eliminating the need for a local client. All the major browsers on Linux are supported including chromium. (helped with design of the browser extension)

bassdropvroom 5y ago
Sure, but a browser extension cannot handle anything outside the browser. Which for many is fine, but there are still plenty of individuals who need that outside the of the browser.
- 1cvmask 5y ago
  Absolutely correct. For those edge cases there is a copy/paste available from the web portal or browser extension.
  - bassdropvroom 5y ago
    Pretty much all password managers I've used have had this. I see having to copy and paste more as a workaround for a missing desktop client rather than a solution.

rvz 5y ago

What a scam. All this hype and it is another Electron app. Windows and Mac versions are native and yet Linux gets a version that uses 'Electron'. Yuck. Fortunately, to give us the illusion that it is 'fast' they need to mention that it uses 'Rust'. And?

f00zz 5y ago
I wonder if Qt developers are that hard to find.
- konart 5y ago
  How many widely used Qt\GTK apps can you name if we are talking about general market and not just linux tools build by developers for developers? I can name Krita and that's about it. So... yeah, I guess finding a professional skilled in Qt or GTK might be problem. And honestly - why bother?
  - f00zz 5y ago
    Telegram, Maya, Ableton Live?
    - konart 5y ago
      See - now we know were all those Qt devs are :)
wbkang 5y ago
It specifically calls out many the native integration features. What are you looking for in non electron apps that is missing in this version of app?
- rvz 5y ago
  How does calling 'native integration features' make it 'native'?. If the whole app is running in a 'browser' (which is exactly what Electron apps do) it is not a native app. 1Password 7 on my Mac is a native app. > What are you looking for in non electron apps that is missing in this version of app? In general. That fact that I don't need to upgrade the RAM of my computer to run multiple apps at the same time. I can do that with native apps perfectly but not with downloading and using tons of Electron apps. Has to be close one app and open another or else the computer grinds to a halt. Adding one more Electron app to the mix (Regardless of using 'Rust') makes it a step closer to running my computer to the ground.

clircle 5y ago

I've just switched to KeePassXC from bitwarden in the last month, and the experience has been pretty bad. My main complaint is that KeepassXC-browser can't recognize maybe 30-50% of login fields, and the autotype shortcuts seem to be broken in Firefox. Maybe I can switch to 1Password.

PascLeRasc 5y ago
1Password works so much better for me than KeepassXC, especially in Firefox auto fill. But so did Bitwarden. Both are great options.
philliphaydon 5y ago
Why did you switch from bit warden?
- clircle 5y ago
  My wife was spoked that all my passwords were in the cloud and asked me to start using a local PW manager.

yxhuvud 5y ago

I've had the beta installed a long time but it stopped working a week or two ago. Perhaps I need to reinstall or something now that the main version is live? EDIT: Nope, still can't login. Bleh.

yabones 5y ago
I think something was borked in the config/sqlite db a few updates ago when the 'native' auth parts were added. I was bitten with the same bug. Nuking the `.config/1Password` directory and re-adding my account seemed to work. Not a great solution, but it's worked fine since.
- hartjer 5y ago
  Thanks for the guidance
- yxhuvud 5y ago
  Many thanks, it worked.
bwoodruff 5y ago
Really sorry to hear about that. You may've missed a database migration during the beta period. Please reach out to us and we'll be happy to help. support+linux@1password.com - Ben, 1Password
jtdressel 5y ago
Were you able to update to 8.0.34? We recently moved the deb and rpm repositories to prepare for this release. Installing the deb or rpm from https://1password.com/downloads/linux/ https://1password.com/downloads/linux/ should setup the correct repo for future updates. If you have 8.0.34, and still can't log-in you may be experiencing the issue yabones described. support@1password.com can provide you with more hands-on help. (Disclosure: I work at 1Password)
- yxhuvud 5y ago
  Yes, after applying the solution provided by yabones everything seems to work. Thanks anyhow :)

bognition 5y ago

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we share with the kids too) I get that people bristle about SaaS subscriptions in their personal life but the $60/year it costs is well worth it. The research shows that strong passwords and limiting re-use is extremely effective at preventing account compromises and 1Password makes this dead simple. The thing that finally made it an incredible app was when Apple finally allowed 3rd party password management in iOS. Yes there might be better password managers out there and they might have better security. However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux.

progx 5y ago
Bitwarden https://bitwarden.com/ https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for 1password for linux and switched last year to bitwarden. Family Account for 6 Users ($40 per year)
- bitlevel 5y ago
  Moving from 1Password to Bitwarden was the best thing I did. Bitwarden enabled me to use it with Linux, Mac, Windows, Web, etc. _years_ before 1Password decided to join the party. And there's no subscription to speak of - just a premium "extra features you may or may not want" yearly payment, which works out _much_ cheaper. Finally - all my passwords belong to me. Self hosted server means that I keep control, not some random cloud.
  - throwaway8581 5y ago
    Since Bitwarden is end-to-end encrypted, the risk isn't who hosts the data but who controls chrome extension and App Store updates. Bitwarden's servers being compromised would cause you no harm except data loss, but a malicious client update could steal all of your passwords.

rubyist5eva 5y ago

FINALLY - I've been making due with 1Password X in the browser, but having the app itself will be much more convenient.

OttPeterR 5y ago

Even though we’re a Bitwarden family, I’m happy to see other password managers supporting Linux, the world needs more native Linux support in their applications! Edit: not too happy about electron, but it’s still a step in the right direction for the common folk who use Ubuntu and aren’t the most tech savvy and just don’t care

ziml77 5y ago
Bitwarden is also Electron, at least on MacOS. I discovered that when I wanted to mass-delete entries and Cmd-A selected a bunch of random text on screen (including the hint text in the search box...). Was able to confirm by pressing F12 which brought up the dev tools.
onedr0p 5y ago
Isn't Bitwarden electron on all desktop platforms?

f00zz 5y ago

I just use pass: https://www.passwordstore.org/ https://www.passwordstore.org/

sam_lowry_ 5y ago
gopass [1] is a 100% compatible pass implementation that has some collaboration features added. However, I primarily use it for the `gopass search` output. This is where `pass` really sucks for those who copy-paste. [1] https://github.com/gopasspw/gopass https://github.com/gopasspw/gopass
- creese 5y ago
  find ~/.password-store -name '*.gpg' -printf '%P\n' | sed -e 's:.gpg$::gi' | fzf | xargs pass -c There is also an extension: https://github.com/ficoos/pass-fzf https://github.com/ficoos/pass-fzf
  - sam_lowry_ 5y ago
    Good point, but `pacman -S gopass` is wa-a-ay easier ;-)
    - creese 5y ago
      I use a bash function: pass () { if [ $# -eq 0 ] || ( [ $# -eq 1 ] && [ $1 = "-c" ] ); then find ~/.password-store -name '\*.gpg' -printf '%P\n' | sed -e 's:.gpg$::gi' | fzf | xargs /usr/local/bin/pass $@; else /usr/local/bin/pass $@; fi } pass + fzf + bash > gopass. DOTADIW.
drstewart 5y ago
Correct. For a Linux user, you can already build such a system yourself quite trivially by getting an FTP account, mounting it locally with curlftpfs, and then using pass on the mounted filesystem. From Windows or Mac, this FTP account could be accessed through built-in software.

waheoo 5y ago

You mean bitwarden?

tzs 5y ago

Interesting: > 1Password for Linux also debuts with several features that are coming soon to 1Password for Mac, Windows, iOS, and Android That should be encouraging for Linux users. It suggests that the Linux version is not just a port that will forever at best follow the other platforms. It can get pretty annoying when you have something that is available on multiple platforms, and your platform tends to always lag the others.

leejoramo 5y ago
This does look amazing. Reading the announcement show a level of deep integration not just for Linux, but for individual distributions and UI’s.
- RenePardo 5y ago
  Rich Harris has it right. LANPAR is in fact the world's first electronic spreadsheet. The inventors/creators also invented implementing Forward Referencing - the cornerstone of spreadsheets. This was in 1969, ten years before Visicac and 14 years before Lotus 1-2-3. LANPAR was used extensively for Plant Budgeting operations across every telephone company in North America throughout the early 70's. VisiCalc, SuperCalc and TKSolver did not have Forward referencing. You had to manually refresh the screen (recalculate the entire spreadsheet) and watch to see when cells stopped changing values (if they needed results from cells further in the spreadsheet (left to right, top to bottom). Lotus 1-2-3 did have Forward Referencing. Multiplan I, did not and accordingly could not hurt Lotus until MultiPlan II incorporated it. I had communications from magazine editor(s) who simply had not been aware of LANPAR because it was so far ahead of its time, and 10 years later VisiCalc implemented its spreadsheet on Apple's microcomputer - popularizing spreadsheets at a consumer level. So Yes, Rich Harris got it totally 100% right!!
apozem 5y ago
1Password in Firefox unlocking the desktop app caught my eye. I'm on Mac and have to unlock 1Password in Firefox completely separately from the desktop Mac app.
- 5y ago

Jeff_Brown 5y ago

If I ever move to Brazil, I look forward to welcoming all of Brazil to my family. I'm not sure how they get by alone.

xiaomai 5y ago

I love seeing all the proper integration with gnome/kernel/etc. Props to the 1password team.

hartjer 5y ago

As a user of their linux client, the experience so far has been pretty miserable. Is this a new client?

dieortin 5y ago
Yes, it was beta until now. What was it that didn’t work for you? I’ve had a perfect experience myself.

htatche 5y ago

Cool, just swapped the sandboxed one for this version, it feels snappy!

AnonHP 5y ago

PSA: Note that AgileBits intentionally hides the standalone license option and pushes subscription as the only visible scheme to get the application. This is a long standing dark pattern, and though the support staff will admit on their forums or here that the standalone license does exist, you wouldn't be able to find it without some special incantations on the forums. They will keep reiterating that it's for your own good so that you don't get confused. The application UX may be great. The sync may be great. The security of the closed source application may be great (because of audits). But this single dark pattern and the condescending attitude of their team members whenever the topic of standalone license comes up are enough to avoid this company. If you can get to the standalone license purchase option within three or four clicks from the main site, do let me know. I switched out of 1Password to Bitwarden long ago. I will admit that Bitwarden is not fantastic (I find it somewhat slow and also lacking some features). But it doesn't use dark patterns like AgileBits does.

Mister_Snuggles 5y ago
The sync story bothers me. In my mind, Enpass is one that does it correctly. They don't offer a sync service, instead they let you choose from a number of popular ones (OneDrive, Dropbox, iCloud, and a few others), one of which you probably already use. There's no need for yet another cloud service to solve this already solved problem.
- jacurtis 5y ago
  I used the standalone option for 1Password for many years. They too allow the same thing. I would store my 1Password vault on Dropbox, which effectively handled the sync for me.
- blaydator 5y ago
  That’s the feature that made me switched to Enpass as well. Between the licence thing and pushing the subscription, I have lost trust in 1Password, even if it (still) offer the drop sync as well.
- ngrilly 5y ago
  I used to think like that but syncing files and syncing passwords across multiple devices are different things, mainly because of conflict management. If you have a conflict on a file which has been modified on two devices, there is not that much do you can do except using the most recent update based on timestamps and keeping the other one as a backup file. Dropbox does that for example. For password entries, it’s possible to be much master and do the same per entry, and even merge the fields within an entry. To do this in a reliable way on a remote file system, I think a file locking or a compare and swap mechanism is required. Another constraint with using a file sync service is this is introducing a kitchen and egg problem when we lose everything. We first need to restore access to the file sync service to then be able to recover the password file. Which means we can’t use the password manager for the file sync service. Not a deal breaker, as it is what I’m currently doing, but I’ve always wondered how it would go after a catastrophe like losing everything in a home fire.

WesolyKubeczek 5y ago

Sorry 1Password, it took you so long to make this move that I had sold my soul to LastPass in the meantime.

roustem 5y ago
:(
qntty 5y ago
I just switched to 1Password from LastPass after LastPass recently restructured their pricing, and it was very smooth. Just imported by passwords and they all worked.
dteare 5y ago
Sorry it took us so long! We'll do our best to win you back. <3 ++dave; 1Password Founder

connorlay 5y ago

Congrats to the 1Password team! I've been using the beta for a while now on Pop_OS! and it has been getting better with each update. I personally don't mind that it uses Electron. The app feels snappy to me and it looks like their engineers are making efforts to optimize the experience.

blaydator 5y ago

I have always wondered why we can’t make visible the master password when typing it. My master is very long (pass phrase) and I have to type it very carefully, it’s even harder on mobile. Such a pain ! Isn’t it a basic UX pattern to allow the user to show/hide the password as type it (with the popular eye icon at the end of the password input) ? Am I missing something ? Is this not present for security reason ?

roustem 5y ago
It is a protection from "shoulder-surfing". I agree with you, there has to be an option to reveal the password if needed.
benhurmarcel 5y ago
I agree, a button next to the field would be nice. I'm most often alone while typing the master password, it would save me a lot of tries.

______- 5y ago

1Password looks cool and all, but I'm left wondering how it all works. Specifically their pricing[0]. So what happens if I just refuse to pay them when my subscription is up and I need another year/month/whatever? Do all my secrets & passwords become inaccessible? Because if I couldn't access my passes by merely not paying up, that's plain extortion. I didn't read their terms, hopefully someone here can enlighten me. [0] https://1password.com/sign-up/ https://1password.com/sign-up/

pseudalopex 5y ago
The apps become read only. I don't know if you can access the web version.
- bwoodruff 5y ago
  You would also still have read-only access through the web app. :) - Ben, 1Password
curiousgal 5y ago
You still get read-only access. Where you can no longer add or edit your entries.
beyer 5y ago
Your data is yours. Even if you cancel your subscription and your account is frozen[0], you can still sign in to 1Password.com or in the apps to view and export your data. [0] https://support.1password.com/frozen-account/ https://support.1password.com/frozen-account/
- ______- 5y ago
  Thanks for this ;)

dathinab 5y ago

The problem I see is that their Linux Keying integration is as far as I can tell done in a way it's not supposed to be used by anything and as such they need to ship with a SUID binary helper, basically a (hopefully) harmless root backdoor. (And I'm not speaking about the chrome/electrone sandbox, which can be run without SUID on modern systems).

ag_christian 5y ago
Do you mind expanding on why its problematic? We've built the kernel keyring integrations primarily to power the browser integration feature. In this case, "anything" ranges from users curious how it works to malware looking to steal credentials. 1Password puts in effort where possible to defend against attacks on your local system, so we need the keys currently used as part of the kernel keyring integration to be inaccessible to anything in userspace or otherwise some malware could steal credentials going back/forth to the browser. The SUID binary helper is unfortunate, but you can blame Linux for that. Our integration makes extensive use of the KEYCTL_CHOWN and KEYCTL_SETPERM syscalls for the reasons stated above, but a process needs the `CAP_SYS_ADMIN` capability to call them (ctrl+f on the man page for capabilities). In the end, we decided that making it SUID was more transparent to users then giving it that capability on install since the former is more visible.

filereaper 5y ago

What's the password recovery process like with 1Password for family accounts? I'm the administrator for my family's account on LastPass and my wife forgot her master password and has now burned the associated email. The account was unused and empty so nothing was lost but it highlighted to me that account recovery was not smooth or seamless. As an administrator you can't just issue a password reset on their behalf. If you're testing out these password managers, try a recovery first with a burner account before fully entrusting them with valuable passwords.

kelnos 5y ago
If it were possible to recover lost passwords as in your wife's case, then I absolutely would not trust the service at all. If you forget your master password, the passwords contained must be unrecoverable at that point. If they aren't, then that means the server/service has access to your plaintext passwords, and that is (or at least should be) an unacceptable security risk.
- Hackbraten 5y ago
  The server never gets to see your master password nor the vault key. Every client has a public/private key pair. The private key grants access to the (symmetric) vault key and will never leave your device. At vault creation time, a copy of the vault key is encrypted using the public key of the recovery group and then stored on the server. The only secret the server ever sees is the secret (device) ID, and that’s by design.
Hackbraten 5y ago
> What's the password recovery process like with 1Password for family accounts? Short answer: When 1Password creates an encrypted vault, it will make a copy of the key, encrypt it with the public key of another family member (e.g. you) and hold the encrypted result in escrow on 1Password’s servers. If your wife forgets her master password and chooses to request recovery, a special procedure starts. First, 1Password asks you to confirm that the request is legit. If you confirm, the server will delete and re-create your wife’s account, then send you her new public key and the encrypted escrow key. Your app uses your private key to decrypt it. (Now your app has your wife’s vault key.) Your app re-encrypts it with her new public key, uploads the result and forgets the key. Finally, the server sends your wife her encrypted vault together with the thing your app just did. Now your wife can access her vault again. Long answer: see 1Password’s security white paper [1]. [1]: https://1password.com/files/1Password-White-Paper.pdf https://1password.com/files/1Password-White-Paper.pdf

benhurmarcel 5y ago

This is great. Is there any hope of having the possibility to export entries? Looks like it's missing compared to Windows and Mac.

dteare 5y ago
Yup! Since the very beginning in 2006 Roustem and I wanted to make sure everyone used 1Password because they enjoyed doing so and not because of being locked in. File > Export is your friend. ++dave; 1Password Founder
- benhurmarcel 5y ago
  Thanks, I use Ubuntu so I missed that there was a menu bar. It's hidden unless I hit "Alt".

twobitshifter 5y ago

I use StrongBox Pro for managing a keepass database stored on iCloud. I highly recommend the app. StrongBox Pro offers a lifetime ios license for $45 and syncs well with iCloud, while giving you all the features of the more popular apps. My passwords are safe in the keepass file and I know that I'll always be able to open it and back them up wherever I want. Sometimes simpler is better, this is just a single person operation implementing an open format for password management.