Hacker News Reader

Comment by rorrr2 | Hacker News Reader

DO NOT USE 1Password.

If you care about security, there's absolutely no reason to use 1Password over an open source solution like KeePass.

Even if 1Password doesn't have a backdoor now, nothing would stop NSA from inserting one and keep the owners quiet about it with a gag order.

AgileBits is a US company, and so you cannot trust their security. Thank the US government for that.

View on HN

From the linked article, "We have developers in four separate countries: Canada (AgileBits is a Canadian company), the United States, the United Kingdom, and the Netherlands."

... reading comprehension …

There are good password managers, then there's KeyPass. :/

AgileBits is a Canadian company, not a US company. This is also stated in the article.

Is your entire argument for me to stop using 1Password because the NSA could (by your own assertion) put a backdoor in my app? Or do you have another, better reason? I could just not update 1Password, and then I'm never at risk for this supposed back door.

Never is a long time -- what do you do when you get a new device, on a new platform? Do you download a new build for your platform, or do you migrate away?

> If you care about security, there's absolutely no reason to use 1Password over an open source solution like KeePass.

Uh, except it's Windows only? Sorry, I use 1Password only on my iPhone as if it were a hardware authenticator. No problems.

KeePass is open source. There are ports for every major OS. I used it on my android devices, for instance.

KeePass basically only works well on Windows and you have to trust all the other implementations that make it pseudo-crossplatform.

You mention "open-source" so much one would think its a weapon.

Reply on news.ycombinator.com