Hacker News Reader

Comment by jaykru | Hacker News Reader

Really disappointing to see so much bootlicking in this thread. Yes, 1Password is a great product and, yes, AgileBits is a great team of developers. But this change sucks and spits in the face of long-time paying customers who have come to rely on 1Passwords's local features.

1Password can be both worth paying $3 a month for an also making a really bad anti-user decision here. These are not mutually exclusive.

As a former long-time 1Password user, I recently moved to using pass [1] after using their cloud features for some time. At the time I mostly moved for better change tracking with git, but I'm feeling pretty glad about the decision now that they've made this awful change. I'd highly recommend moving to pass or some other FOSS for this class of tool. Why trust your passwords to something outside your control?

[1] https://www.passwordstore.org

View on HN

This is the absolute reality with closed source proprietary software: the user has no say nor ownership in the product; they are in effect granted a revocable license to use a set of features for some indeterminate period of time. The owners of the software licenses may modify, without the user's consent, or even knowledge, the software for any reason and any purpose. On modern closed source operating systems with automatic updates, it's often even impossible to revert to a prior version. I'm not against this type of software, it has its place and purpose, but why trust it for something as critical as personal identity management and authentication? Especially when there are so many free (as in freedom, not price) and open source alternatives on the market?

You are describing closed source proprietary services. If you buy software for your local device(s), the license is generally not revokable. Which OS requires automatic updates?

Not an iOS user, but AFAIK you cannot keep iOS from updating an app. So if the developer pushes an update that nerfs the app, you're screwed.

You can turn off automatic updates, but then you have to update all apps manually. You can't just turn it off for a single app.

I feel the same way. Everyone is praising 1Password, so I bought it and used it and while I could see that it's useful for many people, I have basic needs and may be a bit different use and recently as I started using KeePass (I'm on Windows) it's just turned out to be the perfect password manager. Last bit was KeeAgent plugin which allows me to use encrypted SSH key effortlessly. I like open nature of KeePass and I like that it's just password manager, no fancy browser integrations, I just copy&paste password when I need it and that's about it. No auto sync, I just push the button and my database synchronized to my webdav server, easy, fast and reliable and I understand and control every bit of it. And all that free, of course, it's not like 1Password asks for a lot of money, but I'm living in a poor country and even those $36 is something I have to consider. When I can rent an entire VPS with a lot of services for that price, it's hard to justify paying that kind of money. I'm OK with one time buying of software or even with buying new version (as long as it's optional), but I really don't like subscription model. I understand that developers want their salary every month, so it's kind of tough topic.

> like that it's just password manager, no fancy browser integrations,

except that that’s the most important part! without that, a text file is sufficient.

luckily there are 3p browser integrations for keypass. i’ve not used them but i assume they are reasonable considering the importance as well as the nature of the community that would write such things.

Pass is great, I moved to it from KeePass about a year ago and have never looked back. It uses your gpg key to encrypt passwords and syncs via git. Ridiculously simple and cloud nonsense free.

I also migrated to pass and then let my 1Password account freeze, and couldn't be happier. I like the philosophy behind pass a lot more, it seems like the UNIX-y way passwords should be stored, encrypted, and maintained.

I'm considering moving to Pass from KeePass. Does anyone have experience with syncing it to Android?

I use Pass on both the desktop and Android and have done for a few years now. It works really, really well. I couldn't imagine using anything else at this point.

The only "issue" I've had is formatting my phone, but forgetting to first back up the GPG key I used. The solution is just to create a new key and (from my desktop) reencrypt all the passes. It's not hard, but it does take about 10 minutes.

I use Pass between Linux and Android with a NFC equipped Yubikey. I've never had trouble syncing but then, it's git+ssh so no great mystery there. I guess my only complaint is that I wish Android had some kind of centralized SSH support, every self-hosted styled app does it differently (keys, connections, etc).

This looks very interesting, do you know if there's any way to import 1Password passwords into it?

Ignore me, just spotted a tool in the links on that page.

Reply on news.ycombinator.com