6 ms·

Why does 1Password always bring so much controversy in discussion forums? I’ve been a happy paying customer for 10 (!) years. I was there for the migration to a

by n42 4y ago

Why does 1Password always bring so much controversy in discussion forums? I’ve been a happy paying customer for 10 (!) years. I was there for the migration to a subscription model. I introduced Teams at my company eagerly when it launched. I updated to 1P8 recently without thinking about it, saw the new UI, thought “huh, neat” and moved on. Performance is fine. I barely noticed the change. I am a professional, and don’t mind paying their very reasonable subscription so they can continue to actively maintain the security and functionality of the software that literally protects my entire digital identity. I’m baffled by how many people in our industry are upset by their business model. If you’re making six figures writing software and think $3/month for a cornerstone of your security suite is offensive, you need to grow the fuck up, frankly. Likewise, I don’t care how they moderate their forums. The comments in these threads always feel so self entitled. Use another piece of software if those things are important to you. Plenty of us understand and appreciate the value these guys are creating for us. For me, nothing compares. I’ve tried Keepass, Bitwarden, Apple’s built-in thing, Enpass; they are all either amateurish or missing key functionality that 1Password has that I use every day. All the same, I’m happy they exist. Some day I may need them. I hope more pop up. Anyways, if you’re a dev or employee at 1P I’m writing this for you. Sorry about the jerks. Plenty of us out here love what you are doing.

replete 4y ago
Some people simply don't want to put their passwords onto someone else's computer... I've had little problems with their software, but I don't want to pay a subscription for password hosting because I don't want password hosting
gonehome 4y ago
+1 1Password is really great, the best among the available options by far imo. Most of the negative commentary about it doesn’t matter (I personally prefer native apps to electron apps). The complaints about it being a subscription are weak - software doesn’t exist in a closed system. Keeping up with all the platforms and the OS updates etc. takes perpetual maintenance even if they shipped zero new features. And the features they do ship (family vaults, built in OTP) are really useful. It’s a refreshing escape from the “free” ad-driven hellscape many of the HN commenters complaining are probably employed by.
- manicdee 4y ago
  We have lost features and utility along the way. 1Password now only supports a narrow “happy path” of entering passwords into web pages. You don’t need to cast aspersions against other people to make your argument. Why would you do that? Grow up.
  - gonehome 4y ago
    Most of the complaints were about the subscription model - the comparison to the ad model is relevant. What features and utility were lost? It has way more features and utility now that it had previously. The happy path is the 99% use case, but it also stores non web passwords, docs, and notes etc. just fine.
PragmaticPulp 4y ago
> Why does 1Password always bring so much controversy in discussion forums? It's because 1Password was targeted at tech enthusiasts at the beginning and has migrated to a mass-market product over time. The desires of the tech enthusiast group differ (on average) from the goals of a mass-market consumer product. Every time they switch away from something enthusiasts value (perpetual licenses for a specific version, optimized native apps) the early adopters get upset. The average user doesn't care all that much. > If you’re making six figures writing software and think $3/month for a cornerstone of your security suite is offensive, you need to grow the fuck up, frankly. For me, it's not about the cost. It's about managing one more subscription. My credit card bill is full of little monthly subscriptions, and at this point I'm tired of adding new subscriptions at every turn. Subscriptions aren't a big deal for the first 5-10 services, but once you're juggling 20+ recurring charges for things that don't really need to be recurring charges, it's tiresome. I would gladly pay a premium to have a one-and-done license (for a specific version, just like they did in the past) that didn't add yet another monthly payment for me to manage and another system I need to update when I get a new credit card.
- code_biologist 4y ago
  Also, my password manager is a critical part of my digital life. It's not ok for it to go down. What happens when payments fail for whatever reason? Shit happens. Should I regress to making up passwords on the spot and writing them down? I'm very happy to pay $50+ every year or two for a password manager with great UX and cross device support. It is not ok if any functionality is contingent on a subscription though. I really like the Jetbrains model, where if your subscription lapses your software just keeps on working — no updates though.
  - deleted 4y ago
    [deleted]
  - 1123581321 4y ago
    You can still read and export your data if your payments lapse to the point that your account freezes. They just don’t let you modify the data.
colordrops 4y ago
I and many others will never stop critiquing software, especially commercial software, sorry. I really don't understand your reasoning. Just sounds like "shut up and go somewhere else". How about you ignore the comments you don't like and happily continue to use the software.
- Operyl 4y ago
  The funny thing is that’s what is happening, the company is choosing to remove, ignore, and move on from these comments, and yet here we are. And here come the downvotes for stating a fact, yay!
- 1123581321 4y ago
  The interesting part is the relative absence of long and contentious threads about other commercial software, as I read the comment.
  - reissbaker 4y ago
    IDK, have you seen threads about Go generics, or Uber, or JavaScript/Electron, or Windows 11, or Tesla Autopilot, or China, or the US, or systemd, or... This seems pretty ordinary for HN xD
    - 1123581321 4y ago
      Hah, maybe so. :)
- krainboltgreene 4y ago
  > I and many others will never stop critiquing software, especially commercial software, sorry. It's a real stretch to call any of this "critiquing software".
  - colordrops 4y ago
    What exactly is it then?
yieldcrv 4y ago
The controversy for me isn't that they moved to a subscription model, its that they moved to a cloud only model and completely broke their offline-sync yourself vaults. Its that they maintain an almost hidden version that allows you to keep using your offline vaults, but it incompatible with and separate from their cloud vaults (really counterintuitive if you accidentally stored some stuff in the cloud vaults). The browser extensions for their older offline vault keep breaking as they are only incentivized to move you to the subscription model one. There are plenty of people and organizations that I prefer the Teams, family and subscription model for. Its just a bad experience. And yes, their audience has also used Keepass, Bitwarden and others, and see 1Password as the one capable of not fucking it up but simple did any way? I get it that they don't see an obvious way to do subscriptions that people can't circumvent. It just also brings a lot of skepticism for what other economic pressures are going to guide their decisions, and when.
dkonofalski 4y ago
As someone who has been using 1Password from almost the very beginning, I think the issue with the forum stuff is trust. If you're trusting a company to store your passwords and credentials in the cloud, then there's a certain level of transparency and openness that's required. I also have not had any issues with the subscription model, despite using standalone vaults for as long as possible, and the performance is fine for me on v8 (but I also have the newest Macbook with max RAM so that might not be the case for people on older/less-capable machines). I, personally, am not happy about the way that this or the subscription update have been handled because, to me, it makes me question how they would communicate something far more serious. If they're delisting forum posts because of a decision to not update their app in the Mac App Store yet, how can I be sure that they won't delist forum posts when they have a data breach? How can I be sure that they're not obfuscating other things that are more important than forum posts to try and sweep bigger issues under the rug? It's like the old adage goes - "If you're willing to lie about something that doesn't matter, what are you willing to do about something that does?" These moves are forcing me to, at the very least, start looking at a new password manager. 1Password is still the best, in my opinion, in terms of features and usability but that won't always be the case and transparency and respect for your users are far more important to me than niche features. If I can't trust your company over something small, there's no way I'm going to continue trusting them with some of the most important info in my life. I currently use both LastPass (not a fan) and 1Password. I'll be re-evaluating KeePass and Bitwarden because of this.
- snoopy_telex 4y ago
  I went through the process evaluating Bitwarden recently. It's a shame but it's many years behind 1Password and their roadmap doesn't really appear... hopeful towards catching up. I'm waiting for someone to actually build a better 1Password, learning from the mistakes, rather then migrating to something else right now.
  - mdaniel 4y ago
    I feel the same way, and I'm firmly in the camp of "roll up my sleeves" if there is work to be done, but I have heartburn about doing that for Bitwarden for a few reasons: * their problem doesn't seem to be "we don't have developer bandwidth to add this nice feature," but rather (from my perspective) they're so lacking in discipline and execution. In other words, the PR to fix any such bugs would be so massive as it might as well be a fork * and that's just on the bugfix side -- anyone who thinks manually created folders are superior to tags ... well, there's no PR to fix that * them being open core(?) makes contributing feel like free labor for a commercial company. I have less heartburn contributing fixes to GitLab because they do have a for-real open source offering (the CE edition) that one can run without drama
cassac 4y ago
I don’t think it’s self entitled to expect the software you paid for to keep its original functionality. They kept using dark patterns to enforce the switch to subscriptions.
barnabee 4y ago
I believe that subscriptions are a terrible way to sell software and and per product cloud syncing is awful, rent seeking design. 1Password used to let me buy the software and sync how I see fit. That is, it was decent and reasonable software. I was happy to use and recommend it. That’s no longer the case and I feel like a fool for recommending it, having left those people stuck in a predatory model that I consider at best a bad deal and at worst unethical. So yeah, I’m going to criticise. And no, I don’t feel sorry for the staff of a company operating on a business model that should probably be illegal.
ekianjo 4y ago
> If you’re making six figures writing software and think $3/month for a cornerstone of your security suite is offensive, you need to grow the fuck up, frankly. Since when is it desirable to pay for software on a subscription model until the end of your life? Sounds like someone else needs to grow the fuck up here.
- noirbot 4y ago
  Around the time you expected to be able to work as a software developer for most/all of your life? Sure, I'd prefer to pay $20 for something I'll get free updates for for the rest of my life, but I get why that's not a viable business model when the company needs to pay a six figure salary to devs for the upkeep. It's not desirable as a consumer, but I'd rather just get everything for free and just the way I want it as well. It's a compromise. OP wasn't saying that they prefer it this way, just that if you're literally mad and offended by what they're charging, then you're both blowing things out of proportion and not reacting proportionallyy.
Justsignedup 4y ago
Been using 1pw for some time. I have a few ux gripes that came about in the last about 1-2 years mainly around their latest browser extensions being far too intrusive compared to how it used to work. I really enjoyed the old 1pw. Other than that, feels good, I like it. I pay for it for home and work. I still don't get the Electron hate? Seems a bit insane honestly.
- bwoodruff 4y ago
  Hey — we'd love to chat about your feedback on the browser extensions. There are some settings that may help. Please shoot us an email. <3 -Ben, 1Password
yesimahuman 4y ago
Thank you so much for this post. The hate they are getting over moving to Electron is, frankly, ridiculous. I'm a long-time customer and I'm finding 1Password 8 to be an awesome update and I don't notice that it's not purely "native" (whatever that means anymore). The reality is most users don't notice it because the app works great and electron/web views are actually really solid. The 1P team deserves credit for some of the solid UX improvements they've made as well!
- mdaniel 4y ago
  Spoken like someone who did not use the "drag this window on top of the QR code on your screen" feature, nor its ability to detect native application's bundle-id and fill in passwords based on the application currently in focus To include Windows users in this fun, previously one could invoke a hotkey and 1P would offer to auto-type into almost any Windows dialog on the screen. Poof, gone I bet I could come up with 15 other things if I thought about it. Engineering is filled with tradeoffs, and so they made the "we don't enjoy writing cross platform code" versus "we really made our user's lives better by having native code integration capabilities"
  - gonehome 4y ago
    Yeah I agree, I like 1Password a lot, but also wish they kept the native app.
  - yesimahuman 4y ago
    Just because they moved to electron for the core client doesn't mean they can't add native extensions to add those features back. It's still a fully native app they are building and shipping at the end of the day (just happens to do a lot more work in the web view). I suppose losing those features is a trade-off they made in order to get the rewrite done but wouldn't be surprised if they add in those features later. And the Windows app was in need of a serious update, the experience was not great. We can't pretend that engineering for different platforms has no overhead. If they can now move faster shipping new features to all platforms on day one, users will win. There is going to be a transition period where things aren't at parity yet and that's understandable.
greenthrow 4y ago
What a weird comment. People are being negative because they don't like their actions. It's not that complicated. You aren't even making a counter argument. "Just use something else." is just dismissing criticisms. That is willful ignorance.
- waboremo 4y ago
jen20 4y ago
I don’t care about the subscription - if anything it’s on the cheap side for the value it gives. I too migrated several companies into teams over the years. But, electron: no. I use a Mac primarily, and I want Mac apps that take the platform seriously, and integrate well with it. Regressing from that means you lose my business.
- bwoodruff 4y ago
  We have a deeper level of integration with the Mac than we've ever had. For example, 1Password 8 can now fill into many non-browser 3rd party apps, which was never possible before. https://support.1password.com/mac-universal-autofill/ https://support.1password.com/mac-universal-autofill/ -Ben, 1Password
  - bwoodruff 4y ago
    Another really cool integration we have now is the SSH agent. https://developer.1password.com/docs/ssh https://developer.1password.com/docs/ssh -Ben, 1Password
manicdee 4y ago
The subscription model means that the US government can shut my business down by instructing payment processors to stop taking payments from me, or heck even EMV can do that on their own bat like they do for adult services. If you think the complaints about subscription models are because of the price, it’s you that needs to grow the fuck up, personally. Then there’s the SaaS model where my data is stored on US servers. If at any point the someone in the Internet decides to break BGP, sever an optical fibre, or any number of other shenanigans, I am left with what is effectively read-only access to my vaults. I have no option for self hosting to protect against hostile action between international parties that involves me or Agile Bits as collateral damage. We run our own optical fibre networks to ensure continuity of communications in the face of hostile/negligent behaviour, but with 1Password we do not have the option to host our own security. Then there’s data sovereignty. Agile Bits is a US company, and the US government has shown its willingness to spy and sabotage in the past. Whether it’s intercepting sensitive data in transit (echelon/airbus) or building weaknesses into encryption standards or installing malware on equipment in-transit or sabotaging chip fabs to produce less random RNG, the US has done that. There is no trust here. Agile Bits even put out a “survey” to gauge interest in self-hosting as a means of shutting down discourse on the topic. If there was any intention of supporting self-hosting they would just release a trial product which would be a great demonstration that their business continuity plan would work because self hosting would be the same as Agile Bits hosting. Just run the containers on your own docker instead of Agile Bits cloud. The most “entitled” comment here is yours, talking down to everyone else as if you are the only adult in the room.
- moaf 4y ago
  Not trying to be pedantic, but AgileBits is a Canadian company and has servers in Canada, the US, and the EU. I think they also released a gift card solution to address the concern of recurring payments, or maybe for privacy. I never really understood the use case for this (besides using it as an actual gift), but you made me think about it now. Having said all that, I think your points still stand, but for me I haven't found a company that is more trustworthy. FWIW, I use 1Password at work and KeepassXC at home.
reissbaker 4y ago
I think one major complaint from former users like myself — I started using it over a decade ago as well — is that we bought their software by paying upfront when it had bring-your-own syncing and no (or at one point optional) subscription. Then they intentionally broke bring-your-own syncing, and eventually killed it entirely, switching everyone into a "free" client with a forced subscription without refunding people who paid upfront for the client. That's a dick move — and sure, it's not a ton of money, but that doesn't excuse being dicks. Given that there are OSS options out there e.g. KeePass... Why stay? And for large teams, LastPass has owned the market for a while now (1Password literally cloned their business model), and didn't pull a bait-and-switch; you knew what you were getting into, and why. They also used to be pretty bad about cross-platform support; no idea if that's still true.
- eropple 4y ago
  > Given that there are OSS options out there e.g. KeePass... Why stay? Speaking for myself: because 1Password works everywhere I need it and it means I don't have to think about it. OSS is great at a lot of things. KeePass's user experience is indicative of a place where OSS frequently is not. If I have to think about my password manager, it isn't doing the job I need it to do; when I trialed KeePass, it made me think about it, therefore it doesn't work. For me, of course. Your mileage may vary. I was a 1Password user before they moved to a subscription model, and I was mildly affronted that I would be stuck on an older version if I wanted to keep out-of-band syncing. More than mildly, honestly. Then I tried a bunch of alternatives and they were all, for my purposes, significantly inferior, either in the "I do not trust them to hold onto data" sense or in the features sense or both. So I tried 1Password again, realized that yup, it's still tops, and that $3 a month is way, way too little money to be agitated over. I have realized way more value from 1Password than I have paid either for the original purchase--which I used for quite a long time--or from my subscription. I use it because it makes my life better. Surely you can understand that. > And for large teams, LastPass has owned the market for a while now I don't think that I know a single security professional in my circles who would recommend LastPass unless the alternative is "don't use a password manager".
blakewatson 4y ago
100% this. And I'll add that somehow the new Electron app feels faster and more responsive than the native one. Huge props to the team for that.
kyrra 4y ago
1Password8 for Windows (which I upgraded to blindly) took away a core security feature in my view, which was "unlock on secure desktop". They say it's in-progress[0], but it's been 9 months already. Btw, "unlock on secure desktop" basically opens a desktop where no other app/windows can spy or modify the window. This is the envirnoment used when you have to do the UAC approvals in Windows. [0] https://1password.community/discussion/comment/620238 https://1password.community/discussion/comment/620238

by n42 4y ago

replete 4y ago

Some people simply don't want to put their passwords onto someone else's computer... I've had little problems with their software, but I don't want to pay a subscription for password hosting because I don't want password hosting

gonehome 4y ago

+1 1Password is really great, the best among the available options by far imo. Most of the negative commentary about it doesn’t matter (I personally prefer native apps to electron apps). The complaints about it being a subscription are weak - software doesn’t exist in a closed system. Keeping up with all the platforms and the OS updates etc. takes perpetual maintenance even if they shipped zero new features. And the features they do ship (family vaults, built in OTP) are really useful. It’s a refreshing escape from the “free” ad-driven hellscape many of the HN commenters complaining are probably employed by.

manicdee 4y ago
We have lost features and utility along the way. 1Password now only supports a narrow “happy path” of entering passwords into web pages. You don’t need to cast aspersions against other people to make your argument. Why would you do that? Grow up.
- gonehome 4y ago
  Most of the complaints were about the subscription model - the comparison to the ad model is relevant. What features and utility were lost? It has way more features and utility now that it had previously. The happy path is the 99% use case, but it also stores non web passwords, docs, and notes etc. just fine.

PragmaticPulp 4y ago

> Why does 1Password always bring so much controversy in discussion forums? It's because 1Password was targeted at tech enthusiasts at the beginning and has migrated to a mass-market product over time. The desires of the tech enthusiast group differ (on average) from the goals of a mass-market consumer product. Every time they switch away from something enthusiasts value (perpetual licenses for a specific version, optimized native apps) the early adopters get upset. The average user doesn't care all that much. > If you’re making six figures writing software and think $3/month for a cornerstone of your security suite is offensive, you need to grow the fuck up, frankly. For me, it's not about the cost. It's about managing one more subscription. My credit card bill is full of little monthly subscriptions, and at this point I'm tired of adding new subscriptions at every turn. Subscriptions aren't a big deal for the first 5-10 services, but once you're juggling 20+ recurring charges for things that don't really need to be recurring charges, it's tiresome. I would gladly pay a premium to have a one-and-done license (for a specific version, just like they did in the past) that didn't add yet another monthly payment for me to manage and another system I need to update when I get a new credit card.

code_biologist 4y ago
Also, my password manager is a critical part of my digital life. It's not ok for it to go down. What happens when payments fail for whatever reason? Shit happens. Should I regress to making up passwords on the spot and writing them down? I'm very happy to pay $50+ every year or two for a password manager with great UX and cross device support. It is not ok if any functionality is contingent on a subscription though. I really like the Jetbrains model, where if your subscription lapses your software just keeps on working — no updates though.
- deleted 4y ago
  [deleted]
- 1123581321 4y ago
  You can still read and export your data if your payments lapse to the point that your account freezes. They just don’t let you modify the data.

colordrops 4y ago

I and many others will never stop critiquing software, especially commercial software, sorry. I really don't understand your reasoning. Just sounds like "shut up and go somewhere else". How about you ignore the comments you don't like and happily continue to use the software.

Operyl 4y ago
The funny thing is that’s what is happening, the company is choosing to remove, ignore, and move on from these comments, and yet here we are. And here come the downvotes for stating a fact, yay!
1123581321 4y ago
The interesting part is the relative absence of long and contentious threads about other commercial software, as I read the comment.
- reissbaker 4y ago
  IDK, have you seen threads about Go generics, or Uber, or JavaScript/Electron, or Windows 11, or Tesla Autopilot, or China, or the US, or systemd, or... This seems pretty ordinary for HN xD
  - 1123581321 4y ago
    Hah, maybe so. :)
krainboltgreene 4y ago
> I and many others will never stop critiquing software, especially commercial software, sorry. It's a real stretch to call any of this "critiquing software".
- colordrops 4y ago
  What exactly is it then?

yieldcrv 4y ago

The controversy for me isn't that they moved to a subscription model, its that they moved to a cloud only model and completely broke their offline-sync yourself vaults. Its that they maintain an almost hidden version that allows you to keep using your offline vaults, but it incompatible with and separate from their cloud vaults (really counterintuitive if you accidentally stored some stuff in the cloud vaults). The browser extensions for their older offline vault keep breaking as they are only incentivized to move you to the subscription model one. There are plenty of people and organizations that I prefer the Teams, family and subscription model for. Its just a bad experience. And yes, their audience has also used Keepass, Bitwarden and others, and see 1Password as the one capable of not fucking it up but simple did any way? I get it that they don't see an obvious way to do subscriptions that people can't circumvent. It just also brings a lot of skepticism for what other economic pressures are going to guide their decisions, and when.

dkonofalski 4y ago

As someone who has been using 1Password from almost the very beginning, I think the issue with the forum stuff is trust. If you're trusting a company to store your passwords and credentials in the cloud, then there's a certain level of transparency and openness that's required. I also have not had any issues with the subscription model, despite using standalone vaults for as long as possible, and the performance is fine for me on v8 (but I also have the newest Macbook with max RAM so that might not be the case for people on older/less-capable machines). I, personally, am not happy about the way that this or the subscription update have been handled because, to me, it makes me question how they would communicate something far more serious. If they're delisting forum posts because of a decision to not update their app in the Mac App Store yet, how can I be sure that they won't delist forum posts when they have a data breach? How can I be sure that they're not obfuscating other things that are more important than forum posts to try and sweep bigger issues under the rug? It's like the old adage goes - "If you're willing to lie about something that doesn't matter, what are you willing to do about something that does?" These moves are forcing me to, at the very least, start looking at a new password manager. 1Password is still the best, in my opinion, in terms of features and usability but that won't always be the case and transparency and respect for your users are far more important to me than niche features. If I can't trust your company over something small, there's no way I'm going to continue trusting them with some of the most important info in my life. I currently use both LastPass (not a fan) and 1Password. I'll be re-evaluating KeePass and Bitwarden because of this.

snoopy_telex 4y ago
I went through the process evaluating Bitwarden recently. It's a shame but it's many years behind 1Password and their roadmap doesn't really appear... hopeful towards catching up. I'm waiting for someone to actually build a better 1Password, learning from the mistakes, rather then migrating to something else right now.
- mdaniel 4y ago
  I feel the same way, and I'm firmly in the camp of "roll up my sleeves" if there is work to be done, but I have heartburn about doing that for Bitwarden for a few reasons: * their problem doesn't seem to be "we don't have developer bandwidth to add this nice feature," but rather (from my perspective) they're so lacking in discipline and execution. In other words, the PR to fix any such bugs would be so massive as it might as well be a fork * and that's just on the bugfix side -- anyone who thinks manually created folders are superior to tags ... well, there's no PR to fix that * them being open core(?) makes contributing feel like free labor for a commercial company. I have less heartburn contributing fixes to GitLab because they do have a for-real open source offering (the CE edition) that one can run without drama

cassac 4y ago

I don’t think it’s self entitled to expect the software you paid for to keep its original functionality. They kept using dark patterns to enforce the switch to subscriptions.

barnabee 4y ago

I believe that subscriptions are a terrible way to sell software and and per product cloud syncing is awful, rent seeking design. 1Password used to let me buy the software and sync how I see fit. That is, it was decent and reasonable software. I was happy to use and recommend it. That’s no longer the case and I feel like a fool for recommending it, having left those people stuck in a predatory model that I consider at best a bad deal and at worst unethical. So yeah, I’m going to criticise. And no, I don’t feel sorry for the staff of a company operating on a business model that should probably be illegal.

ekianjo 4y ago

> If you’re making six figures writing software and think $3/month for a cornerstone of your security suite is offensive, you need to grow the fuck up, frankly. Since when is it desirable to pay for software on a subscription model until the end of your life? Sounds like someone else needs to grow the fuck up here.

noirbot 4y ago
Around the time you expected to be able to work as a software developer for most/all of your life? Sure, I'd prefer to pay $20 for something I'll get free updates for for the rest of my life, but I get why that's not a viable business model when the company needs to pay a six figure salary to devs for the upkeep. It's not desirable as a consumer, but I'd rather just get everything for free and just the way I want it as well. It's a compromise. OP wasn't saying that they prefer it this way, just that if you're literally mad and offended by what they're charging, then you're both blowing things out of proportion and not reacting proportionallyy.

Justsignedup 4y ago

Been using 1pw for some time. I have a few ux gripes that came about in the last about 1-2 years mainly around their latest browser extensions being far too intrusive compared to how it used to work. I really enjoyed the old 1pw. Other than that, feels good, I like it. I pay for it for home and work. I still don't get the Electron hate? Seems a bit insane honestly.

bwoodruff 4y ago
Hey — we'd love to chat about your feedback on the browser extensions. There are some settings that may help. Please shoot us an email. <3 -Ben, 1Password

yesimahuman 4y ago

Thank you so much for this post. The hate they are getting over moving to Electron is, frankly, ridiculous. I'm a long-time customer and I'm finding 1Password 8 to be an awesome update and I don't notice that it's not purely "native" (whatever that means anymore). The reality is most users don't notice it because the app works great and electron/web views are actually really solid. The 1P team deserves credit for some of the solid UX improvements they've made as well!

mdaniel 4y ago
Spoken like someone who did not use the "drag this window on top of the QR code on your screen" feature, nor its ability to detect native application's bundle-id and fill in passwords based on the application currently in focus To include Windows users in this fun, previously one could invoke a hotkey and 1P would offer to auto-type into almost any Windows dialog on the screen. Poof, gone I bet I could come up with 15 other things if I thought about it. Engineering is filled with tradeoffs, and so they made the "we don't enjoy writing cross platform code" versus "we really made our user's lives better by having native code integration capabilities"
- gonehome 4y ago
  Yeah I agree, I like 1Password a lot, but also wish they kept the native app.
- yesimahuman 4y ago
  Just because they moved to electron for the core client doesn't mean they can't add native extensions to add those features back. It's still a fully native app they are building and shipping at the end of the day (just happens to do a lot more work in the web view). I suppose losing those features is a trade-off they made in order to get the rewrite done but wouldn't be surprised if they add in those features later. And the Windows app was in need of a serious update, the experience was not great. We can't pretend that engineering for different platforms has no overhead. If they can now move faster shipping new features to all platforms on day one, users will win. There is going to be a transition period where things aren't at parity yet and that's understandable.

greenthrow 4y ago

What a weird comment. People are being negative because they don't like their actions. It's not that complicated. You aren't even making a counter argument. "Just use something else." is just dismissing criticisms. That is willful ignorance.

waboremo 4y ago

jen20 4y ago

I don’t care about the subscription - if anything it’s on the cheap side for the value it gives. I too migrated several companies into teams over the years. But, electron: no. I use a Mac primarily, and I want Mac apps that take the platform seriously, and integrate well with it. Regressing from that means you lose my business.

bwoodruff 4y ago
We have a deeper level of integration with the Mac than we've ever had. For example, 1Password 8 can now fill into many non-browser 3rd party apps, which was never possible before. https://support.1password.com/mac-universal-autofill/ https://support.1password.com/mac-universal-autofill/ -Ben, 1Password
- bwoodruff 4y ago
  Another really cool integration we have now is the SSH agent. https://developer.1password.com/docs/ssh https://developer.1password.com/docs/ssh -Ben, 1Password

manicdee 4y ago

The subscription model means that the US government can shut my business down by instructing payment processors to stop taking payments from me, or heck even EMV can do that on their own bat like they do for adult services. If you think the complaints about subscription models are because of the price, it’s you that needs to grow the fuck up, personally. Then there’s the SaaS model where my data is stored on US servers. If at any point the someone in the Internet decides to break BGP, sever an optical fibre, or any number of other shenanigans, I am left with what is effectively read-only access to my vaults. I have no option for self hosting to protect against hostile action between international parties that involves me or Agile Bits as collateral damage. We run our own optical fibre networks to ensure continuity of communications in the face of hostile/negligent behaviour, but with 1Password we do not have the option to host our own security. Then there’s data sovereignty. Agile Bits is a US company, and the US government has shown its willingness to spy and sabotage in the past. Whether it’s intercepting sensitive data in transit (echelon/airbus) or building weaknesses into encryption standards or installing malware on equipment in-transit or sabotaging chip fabs to produce less random RNG, the US has done that. There is no trust here. Agile Bits even put out a “survey” to gauge interest in self-hosting as a means of shutting down discourse on the topic. If there was any intention of supporting self-hosting they would just release a trial product which would be a great demonstration that their business continuity plan would work because self hosting would be the same as Agile Bits hosting. Just run the containers on your own docker instead of Agile Bits cloud. The most “entitled” comment here is yours, talking down to everyone else as if you are the only adult in the room.

moaf 4y ago
Not trying to be pedantic, but AgileBits is a Canadian company and has servers in Canada, the US, and the EU. I think they also released a gift card solution to address the concern of recurring payments, or maybe for privacy. I never really understood the use case for this (besides using it as an actual gift), but you made me think about it now. Having said all that, I think your points still stand, but for me I haven't found a company that is more trustworthy. FWIW, I use 1Password at work and KeepassXC at home.

reissbaker 4y ago

I think one major complaint from former users like myself — I started using it over a decade ago as well — is that we bought their software by paying upfront when it had bring-your-own syncing and no (or at one point optional) subscription. Then they intentionally broke bring-your-own syncing, and eventually killed it entirely, switching everyone into a "free" client with a forced subscription without refunding people who paid upfront for the client. That's a dick move — and sure, it's not a ton of money, but that doesn't excuse being dicks. Given that there are OSS options out there e.g. KeePass... Why stay? And for large teams, LastPass has owned the market for a while now (1Password literally cloned their business model), and didn't pull a bait-and-switch; you knew what you were getting into, and why. They also used to be pretty bad about cross-platform support; no idea if that's still true.

eropple 4y ago
> Given that there are OSS options out there e.g. KeePass... Why stay? Speaking for myself: because 1Password works everywhere I need it and it means I don't have to think about it. OSS is great at a lot of things. KeePass's user experience is indicative of a place where OSS frequently is not. If I have to think about my password manager, it isn't doing the job I need it to do; when I trialed KeePass, it made me think about it, therefore it doesn't work. For me, of course. Your mileage may vary. I was a 1Password user before they moved to a subscription model, and I was mildly affronted that I would be stuck on an older version if I wanted to keep out-of-band syncing. More than mildly, honestly. Then I tried a bunch of alternatives and they were all, for my purposes, significantly inferior, either in the "I do not trust them to hold onto data" sense or in the features sense or both. So I tried 1Password again, realized that yup, it's still tops, and that $3 a month is way, way too little money to be agitated over. I have realized way more value from 1Password than I have paid either for the original purchase--which I used for quite a long time--or from my subscription. I use it because it makes my life better. Surely you can understand that. > And for large teams, LastPass has owned the market for a while now I don't think that I know a single security professional in my circles who would recommend LastPass unless the alternative is "don't use a password manager".

blakewatson 4y ago

100% this. And I'll add that somehow the new Electron app feels faster and more responsive than the native one. Huge props to the team for that.

kyrra 4y ago

1Password8 for Windows (which I upgraded to blindly) took away a core security feature in my view, which was "unlock on secure desktop". They say it's in-progress[0], but it's been 9 months already. Btw, "unlock on secure desktop" basically opens a desktop where no other app/windows can spy or modify the window. This is the envirnoment used when you have to do the UAC approvals in Windows. [0] https://1password.community/discussion/comment/620238 https://1password.community/discussion/comment/620238