Current thinking about 1Password?

That’s Google and Apple acting as OAuth 2 providers.

One disadvantage of using this is if Google/Apple deny you access to your Google/Apple account (there a few horror stories on the internet for both of them), you’ll also lose access to all sites where you used Google/Apple as OAuth 2 provider.

And (in the case of Google?) they might use it to profile you (knowing which sites/services you use and maybe even when, where, etc.?)

3 Likes

That’s not quite the case for websites that have implemented OAuth properly. In most cases I’ve found that you can set a password (usually via the Forgot password route), and keep using your account as normal. I had to do that on a few websites that I wanted to share with family and friends but accidentally singed up via OAuth.

1 Like

I agree with @svsmailus, @rob, and @polemarxos. Logging in with Apple, Google, and other major companies has its advantages and disadvantages.

But the primary way we are tracked from site to site is the method that has been used since the 1990s. Browser cookies

I’ve had a free Gmail account for 22 years, and a personal domain account hosted on Google for almost as long. And it has always been my habit to delete my browser cache after each session . . . when I remember. I don’t notice “ads that follow me”, and while I may get one or two emails a week in my Gmail account spam bucket, I rarely get any in my Google Workspace account.

That’s not bad, IMO, considering I’ve used my free Gmail address as my username on almost every site I’ve used. And my personal data has been leaked by two of the largest US credit bureaus, and in one of the largest medical data breaches ever.

Every time we purchase something online, or use a loyalty card at the grocery, etc. we leave information with the seller that other companies are will to buy. Privacy may not be dead, but it is definitely on life support. I protect my credentials, delete cookies, and don’t worrry much about privacy. YMMV

1 Like

I still believe 1Password has definite advantages of Apple’s own Passwords app. That being said, I find that Passwords offers a much smoother experience in Safari than 1Password. As an experiment, I’ve let my 1Password account lapse, and I’ll see if I miss it. So far, I’ve been able to get into it to find a couple of things note stored in Passwords, but I don’t know how long that will last.

I feel that Agile Bits is making decisions that it believes are best, and I lack the expertise they have. I don’t second-guess their security analysis. But the ease of integration of Passwords is winning me over.

1 Like

You will always have access “Even if you cancel your subscription and your 1Password account is frozen, you can still sign in to 1Password.com or the apps to view and export your data, as long as you don’t delete your account.”

2 Likes

That said, regardless what the current documentation says, I would operate under the assumption that you’re on a relatively short clock once you cancel your account. There’s no legal agreement that requires them to keep your data on file, and getting it out should (IMHO) be a relatively high priority.

It’s Internet 101. “Lifetime” and “always” mean “until the company says otherwise.” :smiley:

1 Like

Well some good news for us Safari users, native autofill for macOS is in public beta!

One step closer to the Apple Passwords experience (hopefully).

3 Likes

I agree that it’s always a good idea to make a copy of your data before you close an account. But why, when you have millions of users, would 1PW take the time to delete 1GB (per user) of data?

Especially when there is always a chance the customer may come back.

1 Like

They delete your data instantly if you delete your account.

It’s important not to get rid of data if you say it’ll be available until an account is deleted. :stuck_out_tongue: It’s part of the entire service they provide, not junk. It’s not being overlooked or the result of corporate inertia or anything.

1 Like

I gave it up for Strongbox with the passwords stored on our Synology server about a year ago. Got tired of paying the subscription plus 1Password is a honeypot for hackers/scammers

I find 1Password a great service, but as a recent medical retiree (disabled), I find I no longer need all it offers.

I moved back to Proton Pass, which I’ve used off/on over the last few years. Simple to use and good UI. However, using one login & password for all Proton services left me somewhat uncomfortable with its security, so recently I switched to Nord Pass.

I would have honestly preferred to exclusively use Apple Passwords, but I have 2 devices outside the Apple Ecosystem, a Chromebook Plus and Pixel 10a, separate from Mac, iPad, and iPhone 17. Using Google Passwords has never been an option for me.

That’s a fantastic question, and one I’ve asked myself multiple times when I’ve gotten “you haven’t used your account in X years, so we’re going to delete your data” emails from various companies. We’re talking about megabytes of data in some cases, not gigabytes. :slight_smile:

I agree that it’s good business for them to keep the data. But if I’m no longer a customer, I’m also not willing to trust my data to the company “doing the right thing.” Terms Of Service routinely update, and typically not in favor of inactive, non-paying users.

1 Like

Yes to a variety of information being available — I have loyalty memberships and credit card info that I keep in 1P — but most appreciably yes to family members. I am the IT support staff for an older generation, myself and partner, and a younger generation. Being able to put all those people on 1P is such a time, and anxiety, saver.

1 Like

We switched to Apple Passwords awhile back. I liked 1Password, but my wife didn’t like it. Apple Passwords has been a very smooth experience for us. I like it a lot.

But it’s not as nice as the 1Password Safari extension it seems?

I self-host several services as subdomains on the same domain. In 1Password I have configured the exact subdomain for the credentials used, so 1Password’s Safari extension only offers that one entry. Unfortunately, the native autofill shows a subset of all entries for the main domain (usually all for other subdomains…) with an option to show more :cry:

1 Like

That is correct, and this is the current state of iOS autofill since they changed the 1P extension on mobile Safari. I do self-host lots of services too and need domain specific autofill for work too, but I’ve noticed that if you put the exact url in any of the login items it comes up first, which is good enough for me.

For instance, if you self host Home Assistant (ha.domain.com) and Bitwarden (vault.domain.com), if you set up those login items with your subdomains first (and then maybe the direct IP address) it will work as I described above.

I’m already using (only) exact URLs…

But most of those all so have a port (:8080) in the URL. Maybe it chokes on that?

Oh yeah that might be it, I don’t use ports cause I’ve got a reverse proxy in place.

Got that on my VPS, but not on my Raspberry Pi.

Not sure why I didn’t do that on the Pi… :thinking:

I’ve been pondering my future with 1password, having used it for many years (and using Lastpass prior).

Apple’s integrated password solution is likely all that I really need, however this is now a family migration challenge, that is not worth the effort of messing with.

Some of the niceties of 1Password that also make it harder to move:

SSH auth is a great feature
Better cross platform support
More sharing options between other folks who are outside my family

However on the flip side, I believe Apple Password will be better (but aren’t sure as I’ve not used it properly as a primary tool, so happy to get others view points):

More seamless unlock on Apple Devices, across my iPad, MacBook Pro, Mac Studio and iPhone I feel I’m having to enter my 1password password quite a bit).
Better native and browser auto fill, 1password browser plugin often fails to unlock or work properly
Installed by default on my devices and family devices, no need to fiddle (key for my kids)