Hacker News new | ask | show | jobs
by makach 1094 days ago
1Password is probably the best kept secret when it comes to password managers. I don’t understand why not more IT professionals advocate this software.
5 comments

+1 Made the switch this quarter. It's practically the same price, incredibly easy to switch, comfortably similar if you've used lastpass before... And as I went through this process I also discovered despite breaches and insecurity, my LP account actually had some hardening issues remaining that they fixed for new signups, but failed to do so for long time customers. So fuck them. (I've since rolled many of the most important credentials btw)

1. Comb through your last pass, and delete cruft

2. Signup for 1password https://1password.com/switch/

3. use their auto import tool to pull from lastpass

4. Profit for ~3 months just for safety

5. Delete each item in last pass (who know if they do hard or soft delete?)

6. Request account deletion https://lastpass.com/delete_account.php

The big problem is that you have to store the information on 1Passwords site.

I can't see how any business would allow secrets to be stored on hardware they don't control

Earlier versions allowed the store to be on other sites like dropbox for syncing or on your own servers or a mix.

Note I do use 1password as I don't need any corporate secrets at the moment. It allows me to use other browsers than Safari and also Windows and macOS

Everything is end-to-end encrypted, SOC 2 certified, PCI and HIPAA compliant, and they've been audited many times https://support.1password.com/security-assessments/

If businesses can't trust any of that, then we wouldn't have any online businesses.

doesn't LP have the same certifications?
>I don’t understand why not more IT professionals advocate this software.

I can have an offline password manager that just works, for free, and I don't have to worry about backdoors or hackers or incompetence.

Cost. Get a quote for a few thousand users from each vendor. Bitwarden and LastPass will come in around $50k, where 1Password will quote you $75k and have no flexibility to be competitive on their pricing. LastPass will probably drop to $40k later in your decision process to entice you to pick them.

LastPass has known issues and IT departments can make an understandable recommendation to the business to pick Bitwarden even with a slight cost premium. There is nothing to justify the insane premium 1Password demands. I have seen them lose multiple contract opportunities because of this.

Note: The dollar quotes are made up numbers, but the percentage differential is real. 1Password is often 50% higher in total cost.

Surely 75k for a secure password manager is better than 50k for an insecure one. They’re failing at their core competency.
Seconded. I’ve used Lastpass at work a few times and I have zero idea why they still exist - 1password is much better and othet competitors exist, too.