1Password

“I recommend everyone to move your plantext secrets from ~/.kube/config, ~/.ssh etc into a password-manager.”

“I like the idea of how 1Password does it. If your workplace has a business account with 1Password, each of the business users gets a personal account for free.”

“I like the solution I have well enough and both are cheap enough that it’s not worth thinking about how to export/import or whatever”

“my 1Password needs to have both my password (something I know) and secret key or existing logged in device”

“I care far far far more about technical excellence and capability when it comes to security critical pieces of software like 1Password”

“1P7 on the latest and final version is Apple Silicon native and through a lot of major transitions doing nothing exciting”

“Setting your preferred password/passkey manager on Android 17 to 1Password works fine in Chrome and Firefox”

“Works fine on iOS. All my passkeys are in 1Password, and every prompt to use or save a passkey goes through 1P.”

“I only use pass keys by storing them in 1password. Then I don't have to worry about the whole "lose/broke/replace a device" thing”

“I believe that the macOS ecosystem would have been much better if all macOS apps were written in AppKit instead of keep being rewritten into Electron”

“There's not really any reason to be storing sensitive keys in plaintext on your local disk that the agent can access.”

“I often hit problems with 1Password's autofill on particular websites, but by and large I blame the website.”

“1Password for Business accounts all get an additional 1Password for Families license (5 seats), so you can absolutely keep your work and personal life separate.”

“they dumped native apps for electron apps and quit supporting the product I'd been buying upgrades for every couple years”

“Both started out as really excellent things for individuals and both became really awful things for individuals in their pursuit of enterprises.”

“The export/import did OK, but I still had to go one-by-one through 600+ entires to sure things up and fix little things.”

“1P made a really smart decision of having a separate password and secret key and using a PAKE to authenticate.”

“The features they're citing as justification — AI-powered item naming, faster device setup — are convenience improvements, not security improvements.”

“quality has noticeably dropped over the years. I can’t justify paying more while the core functionality is getting worse.”

“This has been replaced by one global keyboard shortcut that only works if your focussed app is a browser with a login screen on it”

“it's the dialog that asks you if you want to update the password stored for example.com after you autofill, that's the gotcha”

“For pure peace-of-mind managing a family and all our passwords and digtial security, it's value is far more than this monthly cost”

“It’s that they’re chasing enterprise for VC unicorn status and clearly intending to leave their original market behind.”

“I've been a mostly happy 1Password customer with a Family plan for quite some time. This may cause me to jump ship.”

“1Password used to be great for personal use and you could sync your vault with Dropbox or Synchings or whatever. I'm sad they stopped selling "forever" licenses”

“took VC funding and have to be a "global leader in identity security" instead of just making a damn good password manager”

“If you do not provide consent by your next renewal date on or after March 27, 2026, your subscription will automatically be cancelled”

“It seems like 1Password is significantly more secure given the ratio of its market share to the number of articles I’ve seen like this one.”

“Extensions are glitchy, host matching is still a buggy mess, the app tries to be too clever and ends up annoying me.”

“E2EE with a high entropy key as is the case with 1P will save you in the case of a compromise of your vaults stored externally”

“1Password lost my respect when they took on VC money and became yet another engineering playground and jobs program for (mostly JavaScript) developers.”

“It's that second sentence which is the problem, they "suggested" by being "smart" items from one AWS domain which ought to have never suggested on another unrelated AWS domain.”

“In 1Password you still need your secret code to login in addition to your password. It essentially acts like a second factor.”

“let you organize passwords/TOTP/Passkeys into vaults, and you can put credentials you want to share with other family members here”

“1Password can manage your SSH keys, and 1Password can/does require a password, so it's still protected with something you know + something you have.”

“This combination provides the most security (without hardware tokens) and 1Password and the OAuth apps make it seamless.”

“since they are serving the Javascript that's doing the client side encryption/decryption, there's no guarantee they can't serve malicious JavaScript”

“I went all in on 1Password when I realized that realistically the most likely attack vector for me is phishing, which it absolutely protects against”

“those orgs actually care about their applications and take great effort to make them feel good despite being built on Electron”

“It does totp. It integrates with TPM in Windows hello. It does sh keys and has its own agent which is a huge help.”