Hacker News new | ask | show | jobs
by dylan604 743 days ago
I have been fighting switching to the SaaS version. Paying a monthly fee for access to my passwords is highway robbery. I do not want/need any of these other "services" they forced upon me. I have trying Apples keychain, but that migration is slow and a total pain in the ass. And it's not even a good replacement.

I'm sure 1Password doesn't care one iota about loosing individual users with attitudes like this. Until the forced to a monthly rent seeking hand in my pocket policy was deployed, I had been a vocal advocate for 1Pass. Now, they're about to loose me altogether

5 comments

> I have been fighting switching to the SaaS version

I felt that way on principle for a long time, but honestly, on reflection, 1P is probably subscription that is most justifiable. I want to outsource online security to people that know what they are doing. I want that to be a viable business for a long time into the future. And I want their funding model to be such that their interests are aligned with those of their paying users (me).

People can get so irrational when it comes to the cost of software. The same person who'd pay hundreds of dollars for a cleaner, or a gym membership, will swear up and down that 70 bucks a year for an online bodyguard is highway robbery.

> People can get so irrational when it comes to the cost of software. The same person who'd pay hundreds of dollars for a cleaner, or a gym membership, will swear up and down that 70 bucks a year for an online bodyguard is highway robbery.

Often while refusing to work for less than six figures as a SWE, hating on companies for seeking VC funding, dismissing non open-source approaches, and then complaining why there aren't more alternatives :)

I'm not sure a password database is a 'online bodyguard'. I am sure that 1password has been going downhill for a few years now. Getting rid of the ability for me to manage my own vault was the last straw for me. I'm still limping along with 1password7 with a local vault for my 'important/sensitive' passwords but i let keychain manage most of my randomass website passwords. Since I'm primarily in the apple ecosystem this works out for me, I do have some linux in my life too, but since I generally access those linux resources using a mac it's just not much of a problem.

I think this new interface to the password feature in macos will probably put even more of a dent into 1password/bitwarden/etc's consumer business driving them even further into catering to enterprise, it's a pitty, but 'this isn't a product, this a feature'.

If you're using a version of 1Password that's several years old and no longer updated, and also splitting your passwords across two solutions, one of which is not accessible on all your devices, I'm not too surprised that you don't enjoy the experience.

The current version of 1Password is pretty much seamless for me across Linux, Mac, and iPhone. It's more seamless than it ever was before, honestly. It works for my technical needs and my parents' non-technical needs alike, and greatly simplifies tech support for the latter. I would sincerely recommend giving it a shot if you haven't already.

> I'm not sure a password database is a 'online bodyguard'.

If that's all 1P is, why not just spin up an SQL db yourself? Because, of course, that's not all 1P is. It's a database, a GUI (for five OSes on two architectures, plus web), extensions to auto-fill (and recognise new passwords, or changed passwords) on a range of ever-changing browsers / websites, a great deal of security hardening for their software and servers, an office full of people that evaluate and consider how to combat emerging threat models, etc. None of this is technically impossible to handle yourself, but that's an extremely inefficient allocation of most people's time.

Keychain is accessible across all my devices, excepting a couple of local linux servers, but since I only access them through terminals from my mac.. shrug

What initially attracted me to 1password was certainly it's browser integration features but after switching to keychain I find the 1password save login/autofill interfaces to be clunky and jarring... and the input/search interface. Those features would be hard for me to write myself, however given that 1password when they killed local vaults also switched to a resource hogging cross platform framework (electron) for it's 'native apps' at the same time.. well two straws that broke my back in that case.

My current 1password vault probably has a dozen entries, I've considered moving them to just an encrypted (doubly encrypted I guess) note inside keychain for break glass emergencies.

I don't think it's so much "paying for an app" as it is the constant rent seeking. It's not that people don't want to pay for 1Password, it's that we're all so damn tired of every company nickel-and-diming us to death. Can't anything just be a one time purchase anymore?

While 1Password probably wouldn't have gotten as popular as it is, if they started as a SaaS, instead of letting everyone think they could just buy it one time and be done, I doubt anyone would be angry about it.

Not defending any particular company here, but writing software for what is essentially a moving target (OS’s and browser extension APIs) is just simply not “one and done” anymore.
> Paying a monthly fee for access to my passwords is highway robber

It would be. Fortunately, 1Password doesn’t do that [1].

You’re paying for an important piece of software to be maintained.

> I'm sure 1Password doesn't care one iota about loosing individual users with attitudes like this

Probably not. Emphasis on attitude.

[1] https://support.1password.com/frozen-account/

This entire assumption that I'm a freeloader is absolute bullshit. I've bought and paid for my copies of 1Password and have even purchased it for others. You can take that freeloader name calling and shove it right back in the place you found it. I'm quite frankly tired of it.

We can have upgrades and working software that gets updates without monthly fees to do it. I also do not need their cloud and only features. They intentionally removed the local vaults specifically to force you to use their cloud. That was the last straw for me.

> We can have upgrades and working software that gets updates without monthly fees to do it.

No, the last twenty years has show us that we can't.

If you want developers to perform ongoing work on their products, you need to accept a model where there's ongoing pay for that work.

> you need to accept a model where there's ongoing pay for that work

Before they switched to subscriptions, it still worked like that: 1Password 4, 1Password 5, 1Password 6 - I paid money each time a new version came out. Sometimes I paid the same day of the release and upgraded immediately. Other times, I may have waited a little bit longer and continued with the version that I had.

Nobody's asking for a free lunch.

They had a model that was ongoing pay for their work. 1password was healthy and happy providing flat fees for major version updates, which were every couple of years. Then some VCs wanted to see more profit so suddenly it's all online, subscription, drop the native clients, and a pivot to enterprise. It got enshittified.
> assumption that I'm a freeloader

Where did I or OP say this?

> can have upgrades and working software that gets updates without monthly fees to do it

It’s a bad financial model.

> intentionally removed the local vaults

This is a valid disagreement.

Subscriptions may be a 'good financial model' for the business, but are rarely a good financial model for the consumer.

If I am required to pay you monthly for a product there becomes less and less reason for the owner of said product to improve the product. With the hassle that comes with switching password managers (even for myself, I provide three families with this product (my parents, my sisters family)) there is a lot of friction involved with leaving a product that is stagnant that I am paying monthly for.

I was much happier with 1password when i was able to evaluate their new major version, see if any features of it were compelling to me and my extended family and make a decision wether or not it was worth the asking price. Generally speaking a major version wouldn't get huge changes over it's lifetime, maybe some bugfixes, maybe some ui improvements around it's new features (could also be considered bugfixes), any security issues that cropped up. At that point their development staff was more focused on brand new features for the next major version.

I think what we ran into, partially, with 1password is them running out of ideas for their next major version. A password manager, to a consumer, is not a super complicated product that requires a bunch features, a lot of the work is in the encryption and security which isn't really consumer facing.

people go back and edit their comments silently after being called out all the time around here
1Password has the most reasonable pricing out of just about any SaaS company. $1/user/month if you're on a family plan. $3/month for individuals. And they provide a great service.

Strongly disagree that they're part of the group of SaaS companies trying to price gouge their users.

Cloud only, and they removed local storage of the vaults. If I'm somewhere that doesn't have internet connectivity, what happens then?

Dislike of SaaS isn't limited to monthly fees, but the lack of features they removed to encourage SaaS adoption

If you are using a device that previously accessed your vault, it will be cached and accessible. It just won't sync until you regain network connectivity.
Is there an actual guarantee that all passwords will be cached (and not just e.g. the N most recently accessed ones), and that the cache will not expire at some point?
I'm not sure, but I'm also not sure there's a guarantee that my self-hosted password vault won't die in the middle of a busy day.
That failure can be mitigated by having a local backup, though. In general, with local stuff, it's not so much that the guarantees are better, it's that you can dial them in yourself to the level you feel comfortable at.
How many passwords are required if you aren’t connecting to the internet? What would you be signing in to?
Do you only keep online passwords in your manager? I've got all sorts of things in mine, plenty that I might need without connectivity, such as the door code to that AirBnB or bank account numbers and PINs. Then again, I never would have done that without offline availability...
That's some low quality snark. I have plenty of local things with passwords. One example is encrypted external drives. That's all your snark gets from me on the off chance it's not actually snark. (must me the most I've used the word snark in one go)
> That's some low quality snark.

I'm on your side in all the comments I've read so far (especially the "freeloader" one), but this one is a clear "assume the worst" which isn't fair to GP. Their comment could very well have been a legitimate and innocent question. Of course it could have been a majorly failed attempt at a troll (since the question has great answers) but assuming the worst just drags everything down. IMHO better to give benefit of the doubt, even if only for the other people reading it later.

After the initial login all your passwords are cached locally anyway.
Same opinion on 1Password's great service. I've found them to be responsive and accessible anytime I've needed them. I'm not seeing all the bugs and issues others are reporting, but I have noticed a couple of odd UI changes lately that feel a bit like a product manager is bored and looking for work to do.
Interesting. Earlier this year I migrated passwords out of 1Password and a few from LastPass and Apple Keychain supported both easily. Just not more complex types of credentials. Every password and website was imported correctly as expected. If not I have yet to notice.
I tried to do the same and failed. The questions were 1) multi-browser support - I use Safari, Chrome, Firefox and Opera - there is a reason for this and I do not want to authorize some of my browsers everyday to serve passwords, 2) ease of use for family with different level of computer/iOS proficiency amongst them. As of now, they are happily running on 1password, but I will be happy to try again this year and next.
On top of that having to open up system preferences to add a new entry was just insane. Hopefully, this new UI into it will lessen that pain.
I'm in the exact same situation. I'm still on 7 (the last fully local version) but the cracks are starting to show. I can forgive them for iOS forcing you onto their update treadmill but they've intentionally crippled the Firefox extension for this version too, and it flat doesn't work on windows anymore and it's not like Windows or Firefox are deprecating their APIs all of the time.