Hacker News Reader

Comment by seanosaur | Hacker News Reader

You're right that you can't change the default vault for Generate Password but you _can_ set the default in the Preferences pane. My default, for instance, is my private vault. Anything I create goes there and if it warrants sharing to other vaults, I do that manually.

View on HN

Upvoting because you're correct, changing this does change the save location, so thanks. Seems mad that it defaults to the shared vault though.

It presumably defaults to whatever first vault that code path sees, so because of a race condition the shared vault could appear before the private one and thus becomes the default.

Mine defaulted to private vault, which is a little frustrating because I'd like it to share everything by default (only other person on my account is my wife). Glad to hear it can be changed.

I use 1password, and I have always had a mild distaste for its 'vaults' UX. I live with it though, and since I'm only creating logins every once in a while I just leave it be, and shake my head every time do use it. On the whole, the service could be better, but for the price it's not too bad :)

The multiple vaults are extremely useful to me since I only have to sync my work passwords with my work computer, not my entire password collection. There’s no reason for my HN, Reddit, TeslaFi or PlugShare account details to be on the work computer regardless how supposedly secure 1Password might be (I don’t own the hardware and I know it has surveillance software installed).

Tangentially, I seem to recall recently (2020 sometime) where someone made custom firmware for a laptop's wifi card that, since the computer was set up with a central hub for most of its peripherals, could sniff data flowing from things like USB stuff and, more interestingly, its keyboard.

It ended up as an extremely elegant keylogger. Cool stuff.

It'd be worthwhile to create a fresh account and screenshot the defaults. Maybe you set your default manually at some point and weren't aware, or there's an easy way to slip up?

Nice catch, though!

It has to be a private vault by default, unless we have a bug in 1Password 7. There were years of internal discussions about how and where the new items should be saved.

When it comes to generated passwords, we had this implementations since 1Passwd 1.0 and it was always a bit kludgey. I believe the redesign in 1Password 8 completely solves this problem by using a special system vault to store the generated values.

-- Roustem 1Password Founder

Unfortunately you alienated a significant portion of your userbase who will not be moving to 8. That said, because my breakpoint was 'i don't trust your fucking cloud with my passwords and i won't be forced to use it', this particular bug does not affect me.

I'm stuck with 1Password because the alternatives, if they meet our company requirements, are so much worse. But the web app is unusably slow and every release is worse than the last - eventually I expect 1Password to sink to being even worse than the competition.

Rude.

But also true for many.

I have it running on many computers and have never seen it default to a shared vault.

The people you are sharing vaults with a going to be trusted people. Where tus factor for and individual's life is going to be low, having passwords shared, whether they're for Netflix or bitcoin private keys and such is simply more convenient and in some cases, desirable, eg a married couple with finances mingled together.

One of that married couple might not want their Tinder password popping up in the shared vault.

I just checked, running the latest version, which I just signed up for, and the default vault is Private. I have never touched that setting and it was always set to Private. So either the behavior has changed or it is incorrect that it ever defaulted to Shared (which wouldn't make any sense whatsoever for a company this focused on privacy).

That's not at all what's described in the OP.

> If you have shared and private vaults on 1Password

That’s right, I have a shared and private vault on 1Password. The default is the private vault, not the shared vault. Appears a few sibling replies are noting a similar understanding, so I’m not sure where the confusion is.

I am using 1PW on iOS (1PW latest) & Windows (1PW 8) & Mac (1PW 7)

I have shared and private vault (the default Private + other new shared)

I have checked on Windows & MacOS again and I remember that option has always been set to the default private vault.

if I’m not mistaken, the default setting is to save it to your private vault. This doesn’t sound like a bug, but rather an error in user behavior.

I'd never change that setting, so mine definitely defaulted to the shared vault. There could be any number of possible reasons it set that as the default, but my guess would be the order I migrated vaults over from the good old days where we could choose how we shared and synced. The fact that it is even possible still seems like a bug to me.

I'm absolutely glad that the Shared vault can be set as the default one; it's great to be able to troubleshoot family members, check if 2FA is on, etc. without having to visit them in person and use their laptop.

Doesn't seem like a bug at all, and in fact I would likely switch to iCloud Keychain if this behavior went away (which doesn't support default-shared but is free).

There seem to be 2 problems here: Generate Password not telling you which vault it will be saved in, and the Shared vault being set as default (presumably) without user input.

It warrants extra care -- every time you save a password to Shared, it should give an explicit visible warning.

In a tool like 1Password, they need to do enough to avoid user errors (I'm sure they are). That is the responsibility of these tools. In other words - there is no such thing as user errors for these tools.

I have different experience with v 7.

Vault for Saving in preferences is set to Primary.

If I select a specific vault to view in 1 password, then end up on a website and create a password, 1Password mini has the viewed vault as selected when it asks to save the password, not the vault I've specified as where to save new passwords.

This has been long standing behavior in 1 Password.

Still on 7 because I'm using a mix of vault locations and while I'm using both teams and personal 1password, I have other vaults in other locations.

Reply on news.ycombinator.com