[jwr]

I've been pretty happy with 1Password for the last 3 years or so. The only point where I had a trust problem was when they introduced subscriptions (which is fine, I happily pay software subscription fees for good software, because that way the software is sustainable), but migration involved creating an online account and entering my secret password in my browser. That is something I always find scary: yes, they do assure me that it's just locally-run JavaScript, and the password never leaves my computer, but still.

In other words, I am somewhat scared, but the usability is so fantastic that I find the compromise reasonable, especially with 2FA (TOTP or U2F using YubiKey).

Now, if only Apple finally learned that prompting me for my Apple ID password in a modal popup whenever they feel like it, without the ability to auto-fill is a no-no...