Just curious what the general consensus of 1Password is here on HN? I am especially interested to hear from people that are actually using/paying for the cloud hosting (their servers).
I was opposed to the subscription-based pricing. However, my wife moved to an employer where it's not possible to install 3rd party software. Since 1Password Anywhere is now defunct [1], we decided to take a family subscription so that she can use the web interface at work.
Their subscription version also works fine - I didn't notice any significant differences in my day to day use, except that sharing has become much simpler.
[1] https://discussions.agilebits.com/discussion/63045/moving-be...
I avoid the 1Password.com cloud hosting stuff because it slightly expands the threat model in exchange for web access to my passwords on public/stranger's computers, something I view as an anti-feature.
I would rate the browser extensions 3.5/5 -- sometimes has trouble when there are multiple browser windows and I can't exactly figure out what the "timeout" period is before I have to enter my cumbersome master password again.
I would rate the Android app 4/5 -- it has a feature to use a PIN instead of my full master password, which is fine for my usage, but that feature never seems to work.
Overall, it works fine about 90% of the time. I feel like I've gotten my monies worth. My password habits are better than before using it. I think the software could be improved and I am slightly hesitant about the companies recent push for cloud hosting (which I will never use).
Neither Windows client nor the Windows browser plugin seems to be as flexible or as polished. Until very recently it wasn't possible to add custom fields (one had to log into 1Password via the in-browser client or use the macOS/iOS client to do things like add a TOTP credential), and the browser plugin's UI is slow and more difficult to use compared to the macOS version. While the Windows client comes packaged as an MSI, I believe that it only supports per-user installs, which prevented me from deploying it using our enterprise configuration management system. Ultimately, it seems like the Windows client and browser plugin aren't supported as well as the macOS/iOS versions, which has ended up slowing our adoption of the software as most of our users run Windows (I'm getting ready to transition away from macOS myself).
The team management features of 1Password work well, but one can only access them via the in-browser web app as neither the client nor the browser plugin provide access to those features. So far I haven't run into any synchronization problems, and that includes using it in some out-of-the-way places with poor network connectivity (high latency/high packet loss/low bandwidth).
Because I was using KeePass, I could not use 1Password's built-in migration tool. Their third-party migration tool (which I grabbed from their GitHub repo) worked smoothly.
Overall, 1Password for Teams works better than the mix of KeePass and ownCloud I was using before (not to mention the questionable third-party ports of KeePass to iOS/Android or the fact that KeePass did not work at all when run under Mono on macOS). Despite the limitations and relatively poor performance of their Windows offerings (my biggest issues with the product), I will likely renew our subscription this year.
"Now there certainly are some geek creed we could get from building PGP/GnuPG signatures files, and we might do it. But I'm doubtful that it actually would provide a meaningful improvement in security. On the whole, we try to avoid "security theater" even if it is of the geeky sort"
* They are a bigger target to a watering hole attack than Transmission BT.
* They think authenticating your downloaded is "security theater".
* They are #2 on http://mostvulnerable.com
0.Browser integration works but the auto-submit feature doesn't.
I use 1P for Teams and have a small personal account and have been very happy.