Hacker News Reader

Comment by dmd | Hacker News Reader

Why does this upgrade require migrating off 1Password?

Updated to clarify. My expectation is that 1Password 7 won’t work on Sonoma. In my experience, AgileBits requires an upgrade for new versions of macOS. IIUC, 1Password 7 is also the last version that you can buy outright rather than paying for by subscription.

Thanks, that makes much more sense.

I've never had a problem using 1Password 7 on updated versions of OSX. I'm in the same boat, and am still using 1Password 7 on Ventura after having upgraded through multiple OSs.

Well then do not update to Sonoma. Otherwise your boat will sink.

I reluctantly upgraded to the subscription for 1Pass after the last OS update but I'm glad I did. The features that the 1Pass team has added since then as well as the fact that the subscription includes apps for all their platforms has already paid itself off in my eyes.

I hear what you're saying, but I'm not planning to ever move to a subscription model for storing my passwords.

As long as you're comfortable self-hosting and admining, that shouldn't be a problem.

It's funny because this really shouldn't be required (and isn't with 1Password standalone). But yes, I will eventually move over to BitWarden.

Yes, but 1Password standalone is missing many of the features of the subscription service that would be impossible to implement without it.

That’s fair, but many people (myself included) don’t need those.

What features are those?

I was forced off standalone when they broke using dropbox as a sync backend, but it's really just a fancy keychain at this point ...

You scared me! Dropbox sync is still working for me in 1P7 for me. When did it break for you? (I'm using the latest macOS and iOS.)

I can't recall the exact details, but something didn't work anymore and all the things said "upgrade to 8" and it wasn't until after I got to 8 that I realized there were ways to keep 7 and keep it working.

Honestly, the feeling that I got "forced" into 8 is what makes me mostly dislike the company, and will eventually bounce me out once I get the motivation.

1Password 7 works fine for me on Sonoma.

Thanks! Updated, and sorry for the false alarm. (But I have been burned in the past.)

Hm I just checked again. I appear to be using:

- 1Password 7 desktop app

- 1Password 7 Safari extension, which seems to work fine (or at least the same way it always worked)

- The latest Chrome extension, which I believe does everything in the browser

So I don't know how well 1Password 7 works with Chrome.

I was also reluctant to upgrade to 1Password 8, mostly out of principle. I didn't want to pay for a subscription.

But after having reconsidered my disaster recovery procedure, I swallowed the bitter pill after all. The problem is that I need to be able to recover my passwords when 1) my house was on fire AND 2) I left my phone behind during the evacuation.

My 1Password db was stored on Dropbox. But my Dropbox password is in 1Password. Furthermore Dropbox sometimes requires 2-factor auth via email... and my Gmail password is also in 1Password. And Google is quite a bit more serious about 2FA than Dropbox. So even if I write down my Dropbox and Gmail password on paper and store them at my parents' home, I still can't login to Gmail easily because I have lost my phone.

This can be solved by writing down even more stuff on paper. Or by storing a USB stick of the 1Password db at my parents' home (but now the stick should be encrypted, where do you store the key?). The point is: the rabbit hole goes deep, and you have to keep all that stuff updated. Plus my parents will have access to all my data. Not that I don't trust them, but what happens if someone breaks into their house?

All this can be much simplified by just getting a 1Password subscription. I store my 1Password secret key (not master password) at my parents' home. They can't do anything with just the secret key. I memorized my master password. All 2FA recovery codes are in 1Password. This way everything can be recovered without the risk that my parents or a burglar at their house can access my passwords. I think this simplicity in disaster recovery is worth the subscription price.

Reply on news.ycombinator.com