7 ms·
>Fix passwords with a tap. >The Passwords app alerts you to weak or compromised passwords and can update them on your behalf without the hassle. Finally, I ho
by seaal 4mo ago
>Fix passwords with a tap.
>The Passwords app alerts you to weak or compromised passwords and can update them on your behalf without the hassle.
Finally, I hope this works well. Personally one of the worst things to deal with.
- avarun 4mo ago1Password has been able to do this for five+ years. Frankly, it doesn't even really need agentic AI, although a talented team could probably make it perform better with agentic AI. I don't really believe in Apple being that quality team.
- nozzlegear 4mo ago> I don't really believe in Apple being that quality team. Why?
- iknowstuff 4mo agoits clear from their efforts thus far (image playground jesus fuck) that AI and even prompt engineering talent actively flocks away from them
- tomjakubowski 4mo agoHaven't you heard? Prompt engineering is dead. The cool kids are making Claude prompt itself. They're writing loops, not prompts. It's all about optimal tip-to-tip efficiency now. “I don’t prompt Claude anymore. I have loops running that prompt Claude and figuring out what to do. My job is to write loops”.—Boris Cherny
- iknowstuff 4mo agoheh I merely said prompt engineering because their efforts amounted to writing a prompt and sending it off to a model somebody else created to create some awful images
- nozzlegear 4mo agoWhat's wrong with image playground? I haven't used it.
- iknowstuff 4mo agoremember the first will smith eating spaghetti memes? thats the quality
- avazhi 4mo agoMaybe observing Siri for the past 10 years? They have no expertise in this area and their software quality as never been worse.
- nozzlegear 4mo agoTbh I assumed the Passwords team would be handling this and not the Siri team. Maybe I'm wrong.
- sleepybrett 4mo agoI mean every api/app/website has a different way to do this. If there was a standardized api that everyone could conform to to allow this automation I would be all for it. I assume 1p does this by writing custom code/rules for dealing with the most popular sites out there and then erroring out for anything else. AI could potentially help solve those unpopular site/app/whatever edgecase.
- ramses0 4mo agohttps://specification.website/spec/well-known/change-password/ https://specification.website/spec/well-known/change-passwor...
- sanex 4mo agoI hope they don't feed the actual password into the model.
- nixpulvis 4mo agoApple Passwords reliably updates passwords in its database before the password is confirmed to be actually changed. I've been locked out of accounts many times to this. They really need to focus on these basic UX issues.
- lxgr 4mo agoDoes it at least store the old password for a while in some archive, like most competitors do?
- nixpulvis 4mo agoNot at all.
- nozzlegear 4mo agoYes it does
- vmladenov 4mo agoIt goes in the “View History” section of a password entry, with an option in the 3-dot menu for “Clear History”. Not sure how long this is kept
- umpalumpaaa 4mo ago1Password gives you access to previous passwords you had for that reason. Unfortunately not for other fields like email, notes etc… IMHO the perfect password app could just keep all previous versions of any field until the user deletes the history.
- kqp 4mo ago1Password does do full previous versions. It might be a newer feature, I’m only seeing passwords, not full versions, prior to 2018.
- 4mo ago
- xp84 4mo agoI'll believe this when pigs fly. There's a 0% chance it will work. Most websites I've seen have one or all of: * Force you to use email or SMS as a "second factor" to unlock changing password even if you know the old password * A stupid idea of password complexity usually requiring one of a finite set of 5-8 "special characters" which is often only revealed after you've chosen a password that doesn't have them. Or in some cases even banning characters other than the ones they check for. There's a standard for this where you put a regex on the password field, which a good password manager will always use, but the kind of idiots who think limiting the entropy of passwords to increase security is the correct way to do things almost NEVER implement this. * A maximum password length, even as short as 16 characters in many cases * CAPTCHA etc. Any effort spent on this would be better spent elsewhere, including even educating other companies on how passkeys should be used.
- charcircuit 4mo agoThey may be limiting entropy to make it easier for users to remember their password. A user that can't log in is most likely one that will churn.
- xp84 4mo agoI don't think firms like the electric company or (payroll company) ADP are worried that I'll churn. Also, the Venn diagram of "memorable" and "reasonably secure" really only intersects in the region of "Correct horse battery staple" phrases -- and the problematic sites I'm talking about nearly always limit length, which thwarts that type of password terribly. What is the purpose of maxlength on a password?? These shouldn't be stored in any form other than a hash, so unless long enough to pose a DoS threat during the hashing process, length is truly none of their business.
- charcircuit 4mo agoThe entropy of a hashed password is limited by how many bits long the hash is.
- mimischi 4mo ago