Thinking about switching away from 1Password to Apple Passwords

It was me who initially raised this concern. :raised_hand:

Admittedly, I didn’t think it through very well. Your earlier responses encouraged me to think on this more, which is why I’ve imported everything into Apple Passwords to try it out. If I can make it work – and save money on a subscription – that’s a good thing.

I’ll look into Access app more too.

Your concerns prompted me to think more about the topic, and that’s always good. Thank you.

I hope you have a good experience with your Apple Passwords experience. While experimenting, I disabled 1P on all my devices except one iPad in case I missed a password I needed. When I imported from 1P, I reviewed all of my passwords and eliminated duplicates and old ones I no longer need (I hope).

If you find that you prefer 1P, that’s fine, too. :slightly_smiling_face:

1Password has made the explicit commitment that they will never lock you out of your account; they may restrict new information if you do not renew your subscription but they will never lock you out of existing information.

Apple has not made that commitment. Indeed Apple does explicitly enforce lockout periods for various reasons.

2 Likes

Isn’t this really still putting all your eggs in one basket. There is no special/separate encryption for the Access app. It seams it is in the same basket as Passwords. Actually, are either Passwords or Access any more secure than Apple Notes if you have Advanced Data Protection turned on?

So, the (small, but not zero) risk is that your Apple ID gets compromised/changed and you get locked out of everything, including all your Passwords (and Access data). But if your passwords and other sensitve data are in a separate, third party app (1Password, Strongbox, Bitwarden, etc.) the risk of everything being compromised is mitigated. (Don’t put your 1Password password into Passwords - hope that makes sense!). My perspective is that separate encryption protecting my financial and sensitive data is better than everything protected by only my Apple ID login.

P.S. I downloaded the Access app to try it - free to try out with up to five entries. The first thing I did was import from a 1Password export (.1pux) and Access imported 220 items. Under the free trial I cannot create a new entry but I can certainly take it for a good spin. The 1Password import function is listed as a Beta capability in the app.

2 Likes

The risk with 1P is not “mitigated” if you lose access to it. In either case, you lose access to all of your sensitive data if you lose access to that data.

There’s a slight risk either way, so regular backups are necessary regardless of where you place the data.

That’s an interesting claim to make, but I imagine there may be technical reasons not subject to their intentions that may result in you being “locked out” and losing access to your account. Just because they say they will not (intentionally) lock you out of your account does not mean that it’s impossible for you to lose access.

I screwed up when I upgraded to 1Password.com from the standalone version I had been using for years. So I ask them delete my online account and let me start over.

If I forget my password or lose my secret key I’m not getting back in.

I am a quite low tech and perhaps more typical user, I use 1Password now, just switched from Last Pass in fact, way beyond when I should have and on advice from folk here. I am tired of the friction at password level really to be honest. I know it is unavoidable but I am coming to see why some folk use ‘password1’ for everything or the dog’s name. I know they shouldn’t but really I can see why. Recently touch ID stopped working, I am sure an Apple issue and the tedium of entering my safe but long and complicated master password was a pain. For some reason, by grace I got my now very old apple watch to work as an ‘unlock’, by switching things on and off for about half an hour… That’ll do until that breaks like Touch ID did…
Fact is I don’t understand half of it, I never understood ‘keychain’ or whatever it is and I am really reluctant to change anything now purely for reasons of the time and learning curve. Probably a mistake on my part but there you go. Excuse the vent guys! :laughing:

I switched a while ago and had not had the need for 1P yet.

I have found that I do prefer Passwords to 1Password, but that is largely because the limited time I used 1Password yielded mixed results at best. Unlike 1Password, I never have an issue with Passwords catching every login. Certainly there are benefits to 1Password that Apple’s version doesn’t offer, but if that were all that was available to me, I’d pick Passwords for my needs. That being said, it’s fair to point out that I use Bitwarden, which I rank above both for me.

1 Like

I don’t use 1Password, but I am using third party apps.

Apple keychain (now Passwords, I guess)- usernames/passwords I use mostly to access stuff using Mac and iOS

Authy- 2fa codes

Bitwarden- usernames/passwords, secure notes (they offer 2fa codes too, but didn’t when I first signed up years ago)

Apple’s Passwords app, and Bitwarden generally mirror each other, but I need to be able to access some of the accounts in different browsers and sometimes on different operating systems, and I have a few secure notes in Bitwarden with other info like encryption recovery keys.

I thought about moving to only use the Passwords app, but decided against it so far. If my iCloud account is somehow compromised, I’ll still have access to Bitwarden, and Authy (neither are using my iCloud email). I’ve also been with Bitwarden since their beginning, and like/support the project- paying their annual sub even though their free plan is more than enough for me.

As far as Authy goes, aside from splitting things up for security reasons, so it isn’t all on iCloud, I don’t really feel like going through the process of moving all of those accounts to a different multi-factor provider.

Apple passwords users, how do you access your passwords in a system without your icloud account? For example, my work laptop has its own apple id, so if I’m at work and want to log onto my web email or similar, I get the password from 1password.

And I have a Windows gaming PC where I need to access my passwords from as well. I did install iCloud for Windows on it yesterday. I don’t know if that syncs passwords yet or not.

Lastly, does Apple passwords support multiple hardware security keys? I have 2 yubikeys configured for 1password in case I lose one. 1Password requires the key when installing it for the first time to authorize the computer.

Im almost positive Apple requires you to authenticate 2 yubikeys when using them.

For what it’s worth, it’s been about five months since I decided to try using the Passwords app instead of 1Password and I have zero complaints or regrets. Filling passwords has worked flawlessly. I thought I might miss 1Password’s organization for non-passwords, but I have not experienced any friction with using Apple Notes for those items instead. At this point, I think I can conclude my experiment and deem the outcome a success for my use cases.

7 Likes

Ditto that for me as well. I’m very happy with Apple Passwords, and actually like the way it functions better than 1Password did. And, I share passwords with my wife without having to pay an additional fee for a “family plan.”

I understand that for some with special needs, 1Passwords is a better choice because they have advanced features they need. But not me. My blog post: Switching from 1Password to Apple Passwords and Access: A Seamless and Affordable Alternative

2 Likes

Recall Password uses face ID to unlock whilst one can use a separate password as additional level of protection to login 1Password.

2 Likes

Im still trying: the one thing I haven’t found a nice workaround for is if I want to store multiple passwords for a website, in that I tend to generate passwords for security questions instead of actually answering them. But with the passwords app I haven’t found a nice way of creating additional passwords for that scenario on the fly. Granted that does not happen too often, but just yesterday I went back to 1Password for that where that was very easy to do.

Anyone with any idea for an easy workflow here?

If the security question logins don’t happen that often, what are your thoughts on storing them in a locked (encrypted) note in Apple Notes?

1 Like

I ended up putting them in the notes field of the Password entries. I seem to see less of these questions on the sites I visit anymore, so the extra step of having to open Passwords, find the right answer, and highlight and paste it into the browser has not been too bad. But I never got 1Password to reliably autofill those answers anyway, so the only thing I miss is the ability for a single-click to select the contents of a dedicated field (in 1Password) vs. having to highlight and copy from Passwords.

1 Like

Thank you for the suggestions - I think I would not mind grabbing the answers from either Passwords Notes field or an encrypted Apple Note … though I gravitate towards the Passwords notes field.

The one gripe I have is how to generate those passwords. In my case two days ago those questions came when registering for a account … while the Login password was quickly generated the passwords app kept that entry open until I had saved it and then for the questions I constantly would have needed to fake a new password creation, actually save the entry because Passwords App would not allow me to copy the password it just randomly created, open that temporary entry, copy password, delete temporary creation, go back to my previous entry with the new login, paste, save and close the entry and repeat with new temporary password creation.

This felt tedious to me and so much quicker und easier from a workflow perspective in 1P … granted that usecase does not occur that often luckily.