bwoodruff

We don't currently support ARM but we'll keep an eye out for feedback on this. Thanks! - Ben, 1Password

Our 1Password X extension works great on Linux. :) - Ben, 1Password

Awesome! We'd be happy to hear any feedback once you start using it. :) - Ben, 1Password

Thanks for the feedback! We can unlock 1Password for Mac via Apple Watch on Macs that have Secure Enclaves now. :) - Ben, 1Password

It is indeed possible to purchase standalone licenses for 1Password 7 for Mac and 1Password 7 for Windows and they can be synced using Dropbox.

- Ben, 1Password

Hi all.

Roo has added a couple of recent comments on our forum that I wanted to make sure were highlighted here as well:

> While it’s too late for most, I have gone back and updated our release notes to indicate that we removed this feature.

(from https://discussions.agilebits.com/discussion/comment/515669/...)

and

> The Pro Features purchase has been removed from sale, but all the features that would have been unlocked have been maintained. There is no longer anything to restore. The more I've been thinking about it, the more I am coming down on the side of restoring the single standalone vault capability for those that previously purchased the Pro Features (or the full price app when it was a paid download long ago).

(from https://discussions.agilebits.com/discussion/comment/515789/...)

We're definitely listening to all of the feedback folks have taken the time to share with us on this and are evaluating how we can best move forward.

Thank you for all the comments, both here and on our forum.

- Ben, 1Password

Minimal data of value, yes. Did you read about the Secret Key?

Do you use Safari? If so that will unfortunately be coming with Safari 13.

Ben from 1Password here. This is absolutely the most important reason why it was done. There are of course business considerations as well, but cutting down on potential data loss scenarios is key.

We're offering a (mostly) closed source solution. You can evaluate the source for the web app, and the browser extensions. If your argument is that folks shouldn't ever consider using something closed source then obviously 1Password is probably not going to be a good fit and we're at a bit of an impasse.

> Edit: also there seems to be a lot of this:

Some, yes. I'm not sure I'd say 'a lot', but yes, it is a work in progress. Our security team should be able to elaborate on any points that we have yet to detail, though, if you're interested.

Hi Grimm1. Ben from 1Password here. I think this is a great question. I'd like to put you in touch with our security team who would be best positioned to answer this. Would you mind writing into support+security@1password.com ? Thanks!

Hey there. Ben from 1Password here. For what it's worth... we do sell licenses for 1Password 7. Please reach out to support@1password.com for details.

Ben from 1Password here. We offer a couple options for Linux: https://support.1password.com/explore/linux/ Hopefully we can continue to expand upon these offerings. Our ops people are primarily Linux users, so we are aware of the challenges.

Ben from 1Password here. This is a valid criticism. While it also doesn't have a direct export option our CLI may help with getting data out of 1Password on Linux: https://support.1password.com/command-line-getting-started/ Hopefully in the future we can bring our robust export options to 1Password X and/or the 1Password.com web interface / CLI. We agree, export is important.

We do support the traditional extension for both membership and standalone customers and it continues to be the recommended way to access 1Password in your browser where possible. If you're experiencing crashes with it we definitely want to know that. We hope to bring desktop integration into 1Password X but as of writing it is in beta testing so I couldn't say when / if it'll be ready for prime time. I've personally been using it extensively as part of the beta though and it is very promising if I do say so myself. Thank you!

We do still offer that as an option. Please reach out to us at support@1password.com for details. Full disclosure: I work for 1Password.

Ben from 1Password here. We much prefer customers stick with us because they're happy with what we're offering rather than because they feel locked in. As such we offer some of the most robust export options available. I would caution that by their nature exports have to be stored unencrypted, so please use extreme caution with any such files and delete them from your disks (and backups!) as soon as you've done what you need to do with them.

Hi manicdee. Ben from 1Password here. I'm sorry for any confusion we've caused, but this is not correct. It is quite the opposite. The WLAN Server in 1Password for Mac can _only_ sync _standalone_ vaults (not membership vaults). It is available with a 1Password 7 for Mac license.

Hi EmersonL. Ben from 1Password here. I'm sorry for the confusion. 1Password 7 and 1Password X are very different offerings. 1Password X is a membership-only browser extension that does not require a desktop application. It is great for folks on Linux or ChromeOS who cannot use one of our desktop applications. Those who are on Mac/Windows who are using either membership or standalone are likely to better enjoy 1Password 7 which can offer a richer experience and better integration with the host operating system.

Hi chrischen. Ben from 1Password here. We do support standalone licensing and vaults in the latest versions. Please reach out to us at support@1password.com for more details. We definitely want to encourage everyone to use the latest versions, which is one of the reasons membership is such a big push for us (as it includes access to all of the latest versions).

Hi callalex. Ben from 1Password here. I'd like to hear more about this situation. 1Password does indeed keep a local cache of your data and even if you cancel your subscription you continue to have read-only access. Would you mind reaching out to support@1password.com to elaborate?

Hi. Ben from 1Password here. We've posted an official response to this concern here: https://discussions.agilebits.com/discussion/comment/515669/...

Ben from 1Password here. Firefox may, but last I checked Chrome did not. We get around that with the traditional extension by having 1Password for Mac listen for the shortcut instead of the extension itself.

Hi voska. Ben from 1Password here. I'm sorry some folks feel neglected. That certainly isn't our intent. I'd encourage anyone who feels that way to reach out to us at support@1password.com. We'd like to understand where those feelings come from and help in any way we can.

To address the concerns about 1Password X...

- We have desktop integration in beta which can help with point #1: https://discussions.agilebits.com/discussion/101231/introduc...

- Our security model has never relied on the sync service that you choose: https://support.1password.com/1password-security/

- Last time I looked into the Cmd+\ issue the primary difficulty was that not all browsers (Chrome, notably) supported \ as a keyboard shortcut for extensions. The reason we are able to get around this with the "traditional" extension is that 1Password for Mac is actually what listens for the shortcut, not the extension. The same functionality is still possible with 1Password X, just not with that specific shortcut.

- 1Password for Mac can be used with the subscription offering. It isn't necessary to use 1Password X. 1Password X is a great alternative for those who cannot install desktop software, particularly those on ChromeOS or Linux.

I'm sorry to hear you're no longer using or recommending 1Password but I hope that helps address some of your questions/concerns.

Ben from 1Password here. We've designed the model so that we aren't a big target. The Secret Key helps with that. https://support.1password.com/secret-key-security/

Hi lolsal. Ben from 1Password here. Implementation details can be found here: https://1pw.ca/whitepaper If you have any questions our security team would be happy to elaborate. They can be reached at support+security@1password.com

> Yes. Given how mass data leaks have shown just how bad people are at choosing passwords - I think it's a very safe assumption that a large proportion of Last Pass users have weak, easily guessable master passwords.

Indeed. Which is in part why we developed the Secret Key. Even if someone chooses a relatively weak Master Password and all of the data were stolen from our servers cracking even just a single password of a single user via brute force would be implausible. The effort to reward ratio is very high (perhaps insurmountably so) on the effort side.

Full disclosure: I work for 1Password.

> Sharing passwords with a team, it's really helpful. Being able to share access, but not the password itself... really nice feature.

1Password offers this as well. Not allowing the end user to reveal passwords it isn't an ideal solution. The password can easily be obtained by anyone who is capable of using the browser's developer tools. Simply inspect the input element after it has been filled and the browser will give the secret away. The only way to be sure someone doesn't have access to an account after you've shared credentials with them (even "hidden" credentials) is to change the credentials for that account.

> The password audit, showing me how old my passwords are, or which ones are weak... it's nice to have a sanity check on all this stuff.

1Password also offers these sorts of checks.

> Given I haven't looked into it in a year or so... but the Dead Man's Switch alone makes it worthwhile for me. My lawyer has this, and 30 days after I kick it he can go in and delete all my accounts.

This, admittedly, we haven't found a good secure way to implement yet. Our current recommendation is to share your Emergency Kit with your lawyer, or whoever needs access, perhaps in a sealed envelope marked to only be opened upon your death.

Full disclosure: I work for 1Password.

Free upgrades forever isn’t a sustainable business model for us.

Ben Woodruff

AgileBits

I’m not entirely sure what you’re asking, but 1Password 7 is a separate purchase, unless you’re using a subscription (then it is included in your subscription). There is no transfer of licenses from v6 to v7. Does that help?

Ben Woodruff

AgileBits