8 ms·
Ask HN: Advice on Migrating from 1Password?
I just found out that 1Password is donating $300,000 to a project founded by a very controversial person, and I'm looking to move to a different password manager.
Has anyone migrated from 1Password recently to another tool/platform? Have you had a good experience with any tools in particular? Any advice, tips? I'm also interested in the corporate-use context; if I can convince my company to switch to an alternative with business controls, I'll surely try.
- rvz 1mo agoHere is the migration guide for 1Password. [0] The CEO of Stripe also donated $1M to Omarchy. Do we need another migration guide for Stripe since the CEO personally donated to Omarchy and then tell everyone to stop using Stripe and all of their services? [0] https://www.patreon.com/violetblue/posts/how-to-migrate-168468176 https://www.patreon.com/violetblue/posts/how-to-migrate-1684...
- ande-mnoc 1mo agoYes, why not?
- rvz 1mo agoA migration guide for all the services that funded Omarchy would be nice which the alternative must not do business with another service. (E.g, Alternative A to Cloudflare must not use Stripe, or Alternative B to Shopify must not use Cloudflare or Dell) They must be completely independent services that is an alternative to any of the companies that funded Omarchy.
- ande-mnoc 1mo agoThankfully, second order effect is a spectrum and not a black-and-white thing.
- eddythompson80 1mo agoHuh, I guess TIL there is a controversy around Omarchy. I generally dismissed it as a serious distro after 5 second once realized it encourages using the AUR as your default package feed. The AUR is useful, but to me it’s something to be very aware of when you’re installing some software. Encouraging people to install everything through it is a crazy way to configure a distro. I just assumed it’s a distro for a very different target audience so kept my thoughts to myself
- TonyStr 1mo agoIt's not really around Omarchy, but around DHH due to his political beliefs. I'm not deep into this, but I think the majority of the controversy stems from this article: https://world.hey.com/dhh/as-i-remember-london-e7d38e64 https://world.hey.com/dhh/as-i-remember-london-e7d38e64 That this controversy goes three levels deep (DHH -> Omarchy -> Supporters of Omarchy (1Password)) is kinda funny to me. At what point does it stop?
- dgellow 1mo agoA more recent one is https://world.hey.com/dhh/wolves-sheep-and-gypsies-ba44af6a https://world.hey.com/dhh/wolves-sheep-and-gypsies-ba44af6a
- TonyStr 1mo agoWow. I just read this one now, and DHH really makes it hard to defend him. It's definitely possible to make this argument without likening groups of people to wolves and sheep...
- deleted 1mo ago[deleted]
- sensanaty 1mo agoMight be cause I'm from the Balkans, but I see nothing extreme here
- dgellow 1mo agoYes
- ggm 1mo agoI migrated from an older 1password to self hosted bitwarden (vaultwarden) using premade configurations which are available for Portman and Docker in the usual places. Mine uses caddy for the Web front, which automates letsencrypt certification. All the client app which talk to bitwarden talk to vaultwarden, but there's no guarantee into the future I guess. I just like self hosted. The export is through CSV in clear. I wish they agreed to use some pkcs defined superencypherment and a json format so you could avoid the pass through plaintext. Do this on a machine you trust, offnet I guess. Bitwarden has corporate options. Password sharing under a reasonable model, group structure.
- bot403 1mo agoJust encrypt your CSV after export with the tool of your choice.
- 0xbadcafebee 1mo agoThank you! Good to know self-hosting via web with external clients also works
- turtlehwan 1mo agoOh, I was only storing and using it in AWS KMS because of the pricing issue, but thanks for the comment. I’ll look into it a bit more.
- gspr 1mo agoAre people in your company moderately technical? If so, I highly recommend https://www.passwordstore.org/ https://www.passwordstore.org/ coupled with a PGP key storage dongle (I personally use NitroKey). Then hosting is just a matter of hosting a minuscule git repo per user. I imagine that a technical company can easily whip up a bespoke simplified interface for its non-technical staff too. I've used it for about a decade at this point, and it's just perfect.
- ngrislain 1mo agoI have been using https://www.passwordstore.org/ https://www.passwordstore.org/ for 10 years and am super happy with it. It does not provide all the convenient integrations of 1Password though.
- tkel 1mo agoCheckout gopass for the modern iteration : https://www.gopass.pw/ https://www.gopass.pw/
- 0xbadcafebee 1mo agoUnfortunately most of our staff are non-technical, so it might be okay for a backend component, but the frontend users need lots of friendly GUIs, documentation, and integration into other apps (browsers primarily)
- vintagedave 1mo agoThere's a bit of a jump here from something appearing good to rapidly becoming very very bad. Here's what I read: > 1Password has pledged $300,000 over three years in support of David Heinemeier Hansson's Linux distribution known as Omarchy, and is now a “distinguished corporate patron” of Omacom. What a nice brand partnership. Supporting a Linux distribution sounds nice; I hadn't heard of that one. But the very next paragraph: > DHH has called for the ethnic cleansing of Europe; he is also an antivaxer, a Covid "truther," a proponent of the "lab leak" conspiracy theory, an 'anti woke' weirdo, and is virulently anti-DEI > In an internal Slack message leaked to press today 1Password’s Roustem Karimov defended DHH as being attacked for his views... Perhaps they could support a different Linux distribution. It's also strongly concerning when someone defends someone with views like that, characterising them as being attacked. In general, toxic, racist, fascist views spread like viruses; when tolerated, through acceptance, they grow. A company needs to root them out. If we trust 1Password with our data, we are trusting a company with those views inside it with our data.
- nubinetwork 1mo ago> Perhaps they could support a different Linux distribution. They won't. SV/YC loves the guy, that's the only reason they're donating to Linux/OSS (but really just omarchy).
- petesergeant 1mo ago> DHH has called for the ethnic cleansing of Europe; he is also an antivaxer, a Covid "truther," a proponent of the "lab leak" conspiracy theory, an 'anti woke' weirdo, and is virulently anti-DEI Leaving aside all the rest of this, I thought "lab leak" was considered a reasonable hypothesis, although not especially likely, these days, rather than some kind of fringe theory.
- dgellow 1mo agoThe lab leak isn’t considered reasonable outside of pundits as far as I’m aware. Unfortunately the pundits are the ones with the microphone
- dokyun 1mo agopiece of paper
- alt227 1mo agoDont know why you are getting downvoted, this is a valid method widely recomended in this day and age. The hacker cant hack your password book locked in your desk drawer!
- mrweasel 1mo agoIt's not dumb, it's just a little inconvenient. My passwords are normally 50+ characters and pretty hard to type out, but I could fix that with "Correct Horse Battery Staple" passwords. Travelling is a little worse. I'd need to carry my little pocket book an risk losing it and now I can't lock my accounts, because I don't have the password for them (I could have a backup). You know, I'm kinda talking myself into just doing passwords in a pocket book.
- chromehearts 1mo agoOut of pure interest, why not settle down to idk .. 15-20 characters? Why 50+ char (with what I assume lots of symbols and randomized characters) passwords?
- mrweasel 1mo agoBecause I just auto-generate them and 50 is the default in 1Password. I rarely change default in any software I use, partly out of laziness and partly to ensure consistency across devices.
- netniuq 1mo agoI moved to self hosted Vaultwarden (Bitwarden server reimplementation that's client-compatible). You can also directly run Bitwarden, but Vaultwarden is easier to self-host, especially OIDCwarden is nice if SSO is your cup of tea. I don't like Bitwarden's UI as much as 1Password's, but at least it feels faster.
- preya2k 1mo agoOIDCwarden still requires two passwords :(
- rcarmo 1mo agoHere you go, I made a quite wide-ranging set of notes here when I switched: https://taoofmac.com/space/apps/1password https://taoofmac.com/space/apps/1password
- 0xbadcafebee 1mo agoThank you!
- secwang 1mo agounix passstore is perfect
- teekert 1mo agoI really enjoy Proton Pass (but I have a paid subscription so I have passmail aliasses as well). I've been going full passkeys recently, no issues yet. Before this I used Vaultwarden, but I was always a bit afraid of the self-hosting (of something this critical), and I really didn't like how you share credentials in BitWarden (through organizations), Proton Pass is much more intuitive with just straight up sharing of credentials or sharing whole Vaults. You can also share through public 1-time visit, limited time valid-urls. I use that a lot when I set up people's accounts. What I don't like is the tight coupling to Proton's services, Pass should have had it's own credentials. But if you're not a Proton user that doesn't matter (or perhaps it doesn't matter t you in any case.)
- dgellow 1mo agoIm a happy Proton customer since a decade for their email and recently file storage service, but I’m concerned about having my passwords and my files and my emails in the same system. It’s risky to have so much in one company, if I lose my proton access for some reasons I’m out of everything
- teekert 1mo agoYou can set an extra password for pass but still. I for one also have my 2fa with them... I get the feeling.
- DavideNL 1mo agoWhat i don't understand is, why Proton Authenticator, which can also sync your 2fa accounts to Proton servers, does not have a separate password (from Proton Pass.) So anyone who gains access to your Proton Pass account credentials, automatically gets access to your synced 2FA codes too And obviously you would want to enable syncing your 2fa accounts, in case your device gets stolen / broken / etc. So the only solution seems to use another 2FA App from another developer. https://proton.me/authenticator https://proton.me/authenticator
- 0xbadcafebee 1mo ago
- alt227 1mo agoIMO choosing products over politics is a pointless game. Use the best tool for the job.
- robin_reala 1mo agoCan I assume that you’re not someone affected by DHH’s abhorrent views?
- john_alan 1mo ago> by DHH’s abhorrent views You know that's just your opinion right? Not an objective truth.
- dgellow 1mo agoWe are on a forum discussing our opinions on things FFS
- modo_mario 1mo agoWhich of his viewpoints is affecting you?
- robin_reala 1mo agoThe fomenting of racial hatred a few tens of kilometres from me? I’m lucky to not be targeted by him and his chosen cause, but a lot of my colleagues are right in his firing line.
- modo_mario 1mo agoWhere is he fomenting racial hatred? He's opposed to mass migration and as someone who finds the local culture erased in places my family is from and where i've lived i can only say I agree. It was never something the local population was in agreement with anyways. A plainly purposefull democratic deficit and more of a slippery slope than I expected since it gets more and more pushed by the same migrants and rootless cosmopolitans that couldn't handle the cognitive dissonance that they might be an outlier and others might feel more tied to their nation or assimilate. After all it wasn't too long ago that progressives were calling people bigots for saying these migrants would not assimilate like some minor culturally similar migrant flows of the past. Now that script has flipped, done a 180 and they collectively developed rapid Alzheimers? I also remember getting the same insults thrown at me for supporting policy that was impossible and fashistic. yet now we do do things take nationality from naturalised dual nationals who are serious criminals, terrorists and the like and it's supported by the same parties and people that were throwing names and continue to do so. I think much of this is all far too late so why would I give a shit about your desperate attempts to keep social cooling going.
- _zoltan_ 1mo ago1p is the best.
- azuanrb 1mo agoThis anti-DHH movement is so weird to me. People seem to read summaries of his views, often based on interpretations that get exaggerated from one article to another until they become something else entirely. At least read the articles yourself, including his other work, so you don’t just cherry-pick the ideas that conform to your existing beliefs. Then form your own opinions.
- dgellow 1mo agoReading the sources makes it way worse…
- fabioborellini 1mo agoYes, I dismissed the reactions as overreaction and the usual drama, until I read what DHH himself has written this summer. He would no longer fit the European far right comfortably to be honest, his current views align better with the 1930's. And that way SV happily invests tens of millions to your collection of dotfiles.
- ShinyLeftPad 1mo agoCan you post the 1930 view link? So far people seem to be posting links to one view that basically any average politically conservative person would hold (limit immigration), although admittedly more flowery prose
- roryirvine 1mo agoYou and others have been provided with links to DHH's writing plenty of times when you've asked for evidence in the many threads on this subject that you've participated in over the past few months. If you don't want to give the impression that you're sealioning in an attempt to derail people's conversations, it might be a good idea to first read some of those links before asking for them again.
- 1mo ago
- fergie 1mo agoDoes DHH actually deserve to be cancelled, or Omarchy "defunded"? I just read the OOTL on Reddit, and I have to say that I am not entirely convinced. https://www.reddit.com/r/linux/comments/1oa74wh/im_out_of_the_loop_whats_the_deal_with_dhh/ https://www.reddit.com/r/linux/comments/1oa74wh/im_out_of_th...
- itsn0tm3 1mo agoHe did post at least two blog posts with very questionable political standpoints, while also not displaying a high level of critical thinking, one could say. Not sure where the point of „should be cancelled“ is reached, but doesn’t paint the best picture of him to say the least. Probably the worst quote: > When wolves get out of control, you shoot them. When gypsies take over public spaces, you deport them. This isn't hard, it isn't cruel. It's the basic logic of self-preservation. [0] The comparison between shooting wolves here seems definitively bad tase and missing nuance. [0] https://world.hey.com/dhh/wolves-sheep-and-gypsies-ba44af6a https://world.hey.com/dhh/wolves-sheep-and-gypsies-ba44af6a [1] https://world.hey.com/dhh/as-i-remember-london-e7d38e64 https://world.hey.com/dhh/as-i-remember-london-e7d38e64
- deleted 1mo ago[deleted]
- KingMob 1mo agoNot sure what'll convince you then, if DHH's own rant against immigrants and roma doesn't.
- fmajid 1mo agoIt's amazing that even after the Holocaust, prejudice against Roma is so prevalent in allegedly polite society.
- fergie 1mo agoI don't know. Something just feels... "off" about it? If you were so inclined you read equivalent stuff in the Telegraph every week, so why go after DHH and his projects so enthusiastically? It just feels like there is something else going on.
- dgellow 1mo agoOh fuck, 1Password is also part of the DHH crowd?!
- deleted 1mo ago[deleted]
- sakopov 1mo agoBeen using DropBox + Keepass for over a decade now.
- dgellow 1mo agoHow do you store passkeys?
- sakopov 1mo agoThere is a plugin available for that - https://github.com/yusei36/KeePassPasskey https://github.com/yusei36/KeePassPasskey
- TiredOfLife 1mo agoDropbox also invested in Omarchy
- lordgrenville 1mo agon00b question I guess but what is the value of a standalone password manager? Seems like most browsers and operating systems offer this capability nowadays.
- jen729w 1mo ago1Password offers a lot more functionality than, say, Apple Passwords. Apple Passwords will store a user/pass combo for a site. That's it, feature list over. 1Password will let you configure how those things autofill, it provides an `op` CLI that you can use with service account tokens, you can store stuff like photos of your passports and licences, it understands 'Sign in with GitHub', it has per-user access per vault for shared accounts, you can add any number of extra fields to each entry, it integrates directly with Claude, it monitors your passwords against Haveibeenpwned, it'll tell you where you could be using 2FA and aren't … and the list goes on.
- dgellow 1mo agoTo not be tied to a single machine or OS
- Hamuko 1mo agoGoogle Password Manager, the one built into Chrome, doesn't even do end-to-end encryption by default. You have to go into the settings and opt in to encrypt your password data before it gets sent to Google. And since it's closed source, you also just have to take Google's word for it. You'd be better off using a standalone password manager that is a) secure by default b) auditable.
- 7bit 1mo agoBrowser password apps are not suited to just store secrets not related to logins. They are personal, meaning no user management or sharing of secrets. They do not sync across devices -- or when they do, with restrictions like same browser/same OS only. They cannot be used for e.g. commit signing or SSH login.
- sho 1mo agoWell, I'm staying exactly where I am. I'll be keeping my company on 1password, and my family too, because I think it's a good product. I don't personally use Omarchy, but I welcome anything that can bring more people to linux on the desktop, so I support that too. I don't agree with everything DHH says, but I absolutely despise online witch hunts so I guess I support him too just on principle. Just felt the need to post that.
- KevinMS 1mo agoMake sure you look closely into politics of anybody connected to the password manager you are switching too, it could be even worse!
- Hamuko 1mo agoIf you switch to a free one, at least you can be sure that your money isn't being funnelled to people who you fundamentally disagree with, even if the creators have shitty beliefs.
- KetoManx64 1mo ago[flagged]
- hs86 1mo agoPasskeys, SSH keys, Fastmail's masked email integration. Did I get myself into vendor lock-in, or are these items covered by those password manager exports?
- fmajid 1mo agoKeePassXC or Bruce Schneier's Password Safe. The nice things about Keepass* is that the format is an open standard with multiple implementations and if any one turns out to be a problem, you can switch easily.
- roryirvine 1mo agoYeah, KeePassXC is pretty basic but is trustworthy and it works. The KeePassXC-Browser extension for Firefox and Chromium-based browsers is useful too: https://github.com/keepassxreboot/keepassxc-browser https://github.com/keepassxreboot/keepassxc-browser
- preya2k 1mo agoWhenever I see KeePass mentioned as an alternative I think we should add this disclaimer: KeePass does not offer sync and conflict resolution. This must be handled by your filesystem/OS/other tools. While this is typically not a problem for single users or very small groups, this can be catastrophic in company/group settings. So please think hard about whether you want sync/conflict resolution (server/client based solutions like Bitwarden/Vaultwarden) to be part of your Password manager – or not.
- mbirth 1mo agoKeePassXC has a merge feature for this scenario. Apps like Strongbox (macOS/iOS) merge automatically while saving. And I believe there are more apps doing this.
- croon 1mo agoI've been using Bitwarden for close to a decade now, and it still works, but given silent documentation changes and increasingly opaque communication following the CEO change, I started considering self-hosting. While vaultwarden exists, and would be the obvious choice, I started shopping around as well. So hijacking the thread to ask if anyone has used Aliasvault [0] (no affiliation)? [0] https://github.com/aliasvault/aliasvault https://github.com/aliasvault/aliasvault
- mplanchard 1mo agoApart from everything about DHH, I personally feel like the choice to invest so much money in Omarchy, of all things, shows a lack of good technical sense from the folks at 1pw. If you’re doing charitable giving, why not give to an established product that will be around in 10 years time, or one that provides core technology the other linux distros depend on? I don’t want the money I spend on 1pw going to some poorly chosen bet on a vibecoded distro, just because it’s in the SV hype limelight at the moment.
- ChiperSoft 1mo agoExactly, Omarchy is little more than a wrapper around Arch, why not just donate to Arch directly? The entire thing has a smell to it, like theres some weird tax avoidance happening or something.
- ocodo 1mo agoNot even a technically well executed wrapper around Arch. Just a guy's meh level config. I feel like releasing a distro based around Niri and calling it Omarcomin
- KetoManx64 1mo ago[flagged]
- KetoManx64 1mo agoBecause Arch itself is run by a cesspool of leftist idealogs that will ban anyone that disagree with them politically. - They banned the XLibre project from the Arch wiki and repos - They rejected DHH's offer to work together to improve the Arch AUR and to work on aarch64 support for mainline.
- svt1234 1mo agoI set up a Passbolt server. Took less than an hour to set up and then migrate all my passwords from 1Password. Free since it is open source.
- phireal 1mo agoYeah, I've been pretty impressed with Passbolt in testing. Currently running Vaultwarden but quite tempted by Passbolt.
- QuiEgo 1mo agoApple’s built in passwords app. It’s basic, but it’s fine. I trust Apple’s security team way more than I trust pretty much any other company on this. I thought about self-hosting Bitwarden, but I honestly don’t trust myself to maintain something security-critical (stay on top of patches and also be aware of supply chain attacks to revert patches and all that fun).
- paulyy_y 1mo agoHow about when you're not on an Apple product?
- QuiEgo 1mo agoThe only non-Apple systems I’m on are headless Linux boxes authenticated with SSH key pairs, which I usually only use through zsh. They have a way to use from Windows, have never tried it: https://support.apple.com/guide/icloud-windows/set-up-icloud-passwords-icw2babf5e03/icloud https://support.apple.com/guide/icloud-windows/set-up-icloud...
- baroninthetrees 1mo agoI wouldn't think this is too difficult. Care to just make your own? I'll give it a go too.
- 0xbadcafebee 1mo ago[flagged]
- cloudfudge 1mo agoDeterministic password generator is the only way to go for me. I have my own that takes the site name, username, and a version number and SHA256 hashes it all with a passphrase, and runs the resulting bytes through a simple transformation that produces a strong password with a good character set. Optionally allows me to specify constraints on the password (e.g. which special chars, limited length) for sites with idiotic password rules. If you want to change a password, you incremement the version number. The whole thing is a simple command line dingus that barfs the password out to the clipboard and a note (including the username reminder) out to stdout. I even had claude port it to ios for me. I've been using this technique for literally all my passwords for about 7 years now and it works great. The only downside is it doesn't help me in situations where I want to either share a password or receive a shared password from someone else. The really beautiful thing is that you can reconstruct your important passwords completely from memory even after losing your whole config. This saved me recently when my laptop died. git clone / vim a config / remember your passphrase / done
- benhurmarcel 1mo agoBut you still need to store the login and version number for each domain in a database. And provide the secret key. At this point you might as well store the encrypted password along with the rest.
- cloudfudge 1mo agoLogin and secret key are from memory (especially login for important accounts). Version number is typically pretty small and thus guessable. Like I said, it worked perfectly for critical stuff when my laptop died recently. There is no database. I used the important accounts from memory to bootstrap my way into github where the full config is saved.
- pfych 1mo agoI migrated to self hosted bitwarden (vaultwarden) on my Nix VPS. Using the CXP integration in the iOS 1Password/Bitwarden apps made bringing over my OTP codes, Passkeys and passwords super easy. It didn't bring over my attached files though, but easy enough to manually do that. Was able to get it setup, migrated and 1Pass sub cancelled in less than an hour. FYI, I was briefly having issues with the iOS and Desktop bitwarden apps but it was due to my vaultwarden version being a little behind! Making sure I was running latest with a nix flake update fixed any issues :)
- dhafin 1mo agoWhat are the main things you're trying to preserve from 1Password in the move? I'm particularly curious whether you're looking for another cloud-based manager, or whether keeping the vault under your own control is part of the reason you're considering a switch.