Hacker News Reader

Comment by drcongo | Hacker News Reader

Upvoting because you're correct, changing this does change the save location, so thanks. Seems mad that it defaults to the shared vault though.

View on HN

It has to be a private vault by default, unless we have a bug in 1Password 7. There were years of internal discussions about how and where the new items should be saved.

When it comes to generated passwords, we had this implementations since 1Passwd 1.0 and it was always a bit kludgey. I believe the redesign in 1Password 8 completely solves this problem by using a special system vault to store the generated values.

-- Roustem 1Password Founder

Unfortunately you alienated a significant portion of your userbase who will not be moving to 8. That said, because my breakpoint was 'i don't trust your fucking cloud with my passwords and i won't be forced to use it', this particular bug does not affect me.

I'm stuck with 1Password because the alternatives, if they meet our company requirements, are so much worse. But the web app is unusably slow and every release is worse than the last - eventually I expect 1Password to sink to being even worse than the competition.

Rude.

But also true for many.

Mine defaulted to private vault, which is a little frustrating because I'd like it to share everything by default (only other person on my account is my wife). Glad to hear it can be changed.

It'd be worthwhile to create a fresh account and screenshot the defaults. Maybe you set your default manually at some point and weren't aware, or there's an easy way to slip up?

Nice catch, though!

I just checked, running the latest version, which I just signed up for, and the default vault is Private. I have never touched that setting and it was always set to Private. So either the behavior has changed or it is incorrect that it ever defaulted to Shared (which wouldn't make any sense whatsoever for a company this focused on privacy).

That's not at all what's described in the OP.

> If you have shared and private vaults on 1Password

That’s right, I have a shared and private vault on 1Password. The default is the private vault, not the shared vault. Appears a few sibling replies are noting a similar understanding, so I’m not sure where the confusion is.

I use 1password, and I have always had a mild distaste for its 'vaults' UX. I live with it though, and since I'm only creating logins every once in a while I just leave it be, and shake my head every time do use it. On the whole, the service could be better, but for the price it's not too bad :)

The multiple vaults are extremely useful to me since I only have to sync my work passwords with my work computer, not my entire password collection. There’s no reason for my HN, Reddit, TeslaFi or PlugShare account details to be on the work computer regardless how supposedly secure 1Password might be (I don’t own the hardware and I know it has surveillance software installed).

Tangentially, I seem to recall recently (2020 sometime) where someone made custom firmware for a laptop's wifi card that, since the computer was set up with a central hub for most of its peripherals, could sniff data flowing from things like USB stuff and, more interestingly, its keyboard.

It ended up as an extremely elegant keylogger. Cool stuff.

I am using 1PW on iOS (1PW latest) & Windows (1PW 8) & Mac (1PW 7)

I have shared and private vault (the default Private + other new shared)

I have checked on Windows & MacOS again and I remember that option has always been set to the default private vault.

I have it running on many computers and have never seen it default to a shared vault.

It presumably defaults to whatever first vault that code path sees, so because of a race condition the shared vault could appear before the private one and thus becomes the default.

The people you are sharing vaults with a going to be trusted people. Where tus factor for and individual's life is going to be low, having passwords shared, whether they're for Netflix or bitcoin private keys and such is simply more convenient and in some cases, desirable, eg a married couple with finances mingled together.

One of that married couple might not want their Tinder password popping up in the shared vault.

Reply on news.ycombinator.com