1Password 8 will be electron, subscription only, and no longer support local vaults

Been spending a lot of time in the beta feedback forum reporting bugs etc and came across what might be an interesting option for some missing local vaults is the possibility of a self hosted 1Password server - you can register interest here Self-hosted 1Password kick-starter | 1Password

5 Likes

I just filled the survey out and explained why I will be leaving 1Password unless something like that becomes an option.

I’ve never been able to get Face ID or Touch ID to work on my machines. Touch ID is a no-go if you use an Otterbox case which is mandatory for any device within reach of farm animals or used on a farm and face ID is so flakey that I can never depend on it so I gave up and disabled it entirely.

That indeed does sound bad. I have had no issues. It works flawlessly with my face. The only times it fails is when I have raindrops on my glasses. Is it possible that Face ID gets confused in your case because of hats, sun-glasses, rain-drops on glasses and stuff like that? An Apple Watch will help in those cases because if Face ID fails in a scenario like that an Apple Watch can unlock your phone (ā€œmask modeā€). Even without the help via the Apple Watch I had almost no issues and in combination with the watch: none. Then again, that does not help you at all. Sorry. :blush:

Thanks for this! Have filled the survey.

Hope they bring a version that can be hosted on Synology or on a Mac with MacStadium. This will also bypass issues I have withe some of my clients not allowing access to 1Password.com. Also hope a self hosting service will be supported by version 7, which I intend to run for as long as it works.

Highly likely.

Watches and me do not get along. I tried a Wyze watch and a fitbit and in addition to not providing me the info I wanted watches, like jewelry, are often problematic when doing farm work. Lamb slime, manure, ditch water, dog slobber etc all play havoc with devices and especially those on my hands and arms. :wink:

But it’s good to know that if htat changes that a watch and face ID might actually work.

4 Likes

@OogieM continues to be the one of the most fascinating tech users I know. Also, I bet an Apple Watch could hold up to Lamb slime.

1 Like

You can setup multiple ā€œfacesā€ with FaceID. So, if you wear certain hats or glasses that you notice cause you problems, setup one while wearing those accessories in addition to the one without.

Perhaps, but having spent eight years on the farm dealing with cow manure, I’m not sure anyone wants that on an expensive Apple Watch! :poop::joy:

4 Likes

I’ve been reading along with interest. I have been a long time 1PW user with the family plan, which is highly useful for (duh) sharing information with other family members.

I have been storing my vaults in 1PW’s cloud for some time now, so the lack of local vaults isn’t necessarily a deal breaker for me. I’m not very happy with the move to Electron, but willing to give them some up front benefit of the doubt with their assurances that the back end is implemented in Rust and Swift. They have, in the past, seemed to know what they are doing as far as security goes. I will see how things pan out as their development cycle goes on.

What I AM confused about, however, is the assumed connection between the removal of local vaults and the shift to Electron. If the back end is implemented in Rust and Swift and only the UI is Electron, what is the limitation on local vaults? Couldn’t those just be done in the backend in Swift (as I would assume they are currently done in Swift or Objective C or whatever other language the Mac app is currently implemented in?

I’ve been wondering about that myself. They say ā€œWe’ve reached the end of what we can do with local vaultsā€ (or words to that effect). What does that even mean?

2 Likes

I doubt there’s any connection between the switch to Electron an the move to end local vaults.

2 Likes

Perhaps they have reached the end of what they can do with local vaults because that option kills their ability to sustain an absolute goal for pure cross-platform development.

—
JJW

1 Like

Local vaults would require front-end code with the security smarts they want to keep in the backend-code. Electron-based UI is platform-agnostic. The locally running code necessary to support local vaults is platform-dependent. They’d be back to supporting code for each platform, which they don’t want to do.

I don’t see any reason why local vaults would inhibit cross-platform development. I suspect that local vaults are a casualty of their emphasis on shared vaults (1Password for Teams/Families).

1 Like

Because the code base needed to access local vaults on Windows may require Windows specific code that cannot translate to macOS. And vice versa. Just guessing.

—
JJW

1 Like

ā€œThe next generation of 1Password apps sync exclusively with 1Password.com (including .cašŸ‡ØšŸ‡¦ and .eušŸ‡ŖšŸ‡ŗ)ā€ - Dave Teare

ā€œ1Password 7 will not be changing and can continue to be used with all currently available sync methodsā€

Yes, it can be confusing but this has nothing to do with Electron. I’ve been using 1password.com for several years and do not have a local vault. However my data is cached locally for offline use. The option to have a local vault ends with v7.

2 Likes

I know lot of users are planning to migrate to the new Keychain on iOS15 and Monterey. Although, I’m not sure how secure it is, coz right now, we need atleast two steps of authentication to access passwords…Mac’s login password, and password manager’s password. With Keychain, its reduced to only only one since you can access keychain with mac’s password…

Which makes the question of why they got rid of them even more interesting.

Yeah. I mean…at some point, a ā€œvaultā€ is just files on a disk, whether it’s stored locally or in the cloud.

I can absolutely see that features that logically require a cloud wouldn’t work with local vaults - but v7 seems to have managed okay. If there are reasons tied to the Electron / Rust changeover, it makes sense. But if not, I’d really like to hear a better explanation of ā€œwhyā€.

And it’s not backwards-compatibility. 1PW hasn’t been shy at all about breaking backwards compatibility with the release of new versions. You upgrade, you upgrade your vault, the old version can’t even access them anymore.

I think the removal of local vaults is simply a push to full SaaS, nothing more.

5 Likes

Presumptively true. While the shift to Electron for the UI can be argued pro and con with points on either side, the removal of local vaults seems (to me) to be an odd decision. I would tend to think that the code to maintain a vault on a local machine would not be that different from the server-side code that handles to vault so as to make maintaining local vaults not that difficult, but obviously I don’t know enough to really understand their issues.

@karlnyhus I would have thought that the code to maintain local vaults would not, in fact, require significant support in the UI compared to the back end implementation. I would have expected separation of that logic. Again without knowing the implementation details, of course, we cannot say for sure.

@DrJJWMac I am sure you are correct that the local vault code on Windows would be different than on Mac. However, I would think that much of the vault code is abstracted from the OS support layer, and there is certainly code that is platform dependent no matter what, such as using the underlying OS’s preference system, for example, or the notification system, or security (unless the ability to use Touch ID is going away on the Mac, for example). I would have made a guess that the vault code is somewhat more generic until it gets to the point of actual file access which certainly would be platform dependent. I still don’t think that the shift to Electron is a compelling factor in eliminating local vaults. Only 1PW can truly answer this question, of course.