I don't know about 1Password, but IIRC the iCloud keychain is laughable security, with easily brute forceable pin-based security that can be performed at Apple HQ without your knowledge.
It's kind of funny- I find myself to be on the critical side when it comes to Apple, especially on HN, but when it comes to iCloud Keychain I use it pretty unquestioning. Probably because I don't trust 1Password or other password managers to be any better, and it's a feature that's baked into the OS so adoption is frictionless.
I tried 1Password but finally resolved to use iCloud keychain after watching this BlackHat 2016 video https://youtu.be/BLGFriOKz6U.
I mean as far as I already trust their OS nothing can really protect me from being spied by them if they are ill intentioned, so as long as they are serious and patch their security flaw on a timely manner I can live with that. Beside it come as a free plan if you don't need more than 5GB of iCloud storage.
I'd figure using an external password manager just add another third party I need to trust and the fact that 1Password offer browser app interface (on top of native) don't reassure me in any way.
Of course if I'd ever need to reassess my threat model because I can't trust Apple anymore, I will quit iCloud service at the same time as their OS and go full FOSS.
iCloud Keychain is definitely well-integrated, but I've run into a few edge cases where it doesn't behave the way I need it to. In these cases, 1Password is better since it actually lets me dig in and edit some of the low-level details in a quality UI (versus digging a couple levels deep in system settings/Safari preferences to find/edit the password in question).
This is useful - thanks for this. I think I'm going to give something like this a try. 1Password has been getting incredibly flakey over the past few years, and I'm just tired of dealing with it (especially in Safari).
The reason I stuck with it so long was so that my passwords would easily sync to my iPad/iPhone, but with iCloud Keychain, I think I'm finally ready to give up on 1Password.
Never had any reliability issues with iCloud Keychain since switching over 2-3 years ago, but obviously it's less featureful than 1Password. I liked how 1Password had a dedicated section for software licenses, but now just use a Notes note for that.
If your 1Password usage is limited to Apple devices, iCloud is another alternative. But since the 1Password keychain is encrypted, it should not matter where you store it in the end.
If your devices are mostly Apple ones, and it’s just you, Apple’s iCloud keychain is actually very good. Syncing is excellent, and you can have things like encrypted notes as well.
I was a longtime user of 1Password myself until they got greedy, at which point I shifted to the native Mac/iOS keychain. I haven’t migrated all my passwords over, and I haven’t really seen the need to, since a lot of what’s in my 1Password vault is old stuff that’s not useful anymore. I look up passwords as I need them, save them to the iCloud keychain on whatever device I’m on, and that’s it.
The one issue with the Apple keychain is that it’s not available in Chrome—Google doesn’t let you use it because they want you to use theirs instead. It’s not a big deal for me—I just look up passwords in the Keychain app, which I had to do on 1P anyway.
Apple has keychain linked to an icloud account but it's subpar of a password manager at best. Most mac people who I know that are techy just use lastpass.
With the Apple iCloud Keychain supporting one-time (the google Authenticator style) passwords from the next major Apple OS release, I have no reason to continue to use 1Password.
Why do you think Apple is crippling third party password managers? If you want to use 1Password instead of iCloud Keychain then there’s support in iOS to do exactly that, and if you enable it then it will auto fill in the same way it did before. I personally find the 1password experience better on iOS than any other platform I’ve tried.
iCloud Keychain is pretty good, but it tragically fails in the followings cases:
* Any browser other than Safari.
* Apps that MacOS/iOS don't parse for password fields for some reasons so you can't generate a password right there — and it's a huge pain to add them manually, practically impossible on iOS.
* Cloud access (if you need your account and don't have any of your devices). Your Keychain is in the iCloud, but you can't access it from icloud.com
So Apple could easily make it much better but they haven't.
reply