Hacker News Reader

Comment by 8fingerlouie | Hacker News Reader

> I use a password manager but, as a mostly-Apple user, I see very little reason not to just use iCloud Keychain

Storing 2FA tokens is one thing iCloud Keychain cannot do (yet ?), and it’s the primary reason I use 1Password over iCloud Keychain.

That being said, with Big Sur, 1Password changed its default behavior from being unintrusive to literally obscuring input fields with big “unlock 1Password” pop up’s.

I’m currently evaluating using either Password-store or Bitwarden with bitwarden_rs as a backend as I really don’t want my logins synchronized anywhere I don’t control.

View on HN

> That being said, with Big Sur, 1Password changed its default behavior from being unintrusive to literally obscuring input fields with big “unlock 1Password” pop up’s.

That's not a Big Sur thing, that's a 1Password thing (I've not upgraded to Big Sur still).

This UI change is what may drive me away from a family plan if it doesn't get addressed.

This is the first thing I disable in settings

1Password > Prefs > Browsers > Untick 'automatically show inline menu' — may help. If not please write to our support team and we'll be happy to work with you.

I think the fingerprint auth stuff Apple’s working on will replace MFA: as I understand it, in Safari, the MacBook’s Fingerprint sensor implements the same protocol as a Yubikey or similar.

One can only hope (and fear) they utilize the secure enclave for this task.

Hope because it would allow me to utilize my mac as a Yubikey. I have no idea how they would synchronize it to all Apple devices, but i'm fairly certain they will find a way.

Fear because it will pretty much guarantee i cannot use my password manager on other platforms.

I already use Secretive (https://github.com/maxgoedjen/secretive) to store SSH keys in the secure enclave with touch id integration, and it works really well. I also keep a couple of Yubikeys as backup :)

Reply on news.ycombinator.com