Hacker News Reader

Comment by toomuchtodo | Hacker News Reader

Apple users will get this natively without having to acquire 1Password. If you’ve bought into the Apple ecosystem and don’t have needs outside of it (Windows, Linux), you can eliminate the need for a separate password manager. Similar to how iCloud Files is moving towards (but likely won’t meet, while not needing to) Dropbox parity.

This is making a friendly version of Yubikeys (using Apple devices) and password vaults for Apple users.

View on HN

For interested readers: 1Password does a few more things. For example, you can add 2FA to 1Password logins, so that 1Password replaces Google Authenticator with the immense advantage that you don’t have to setup 2FA again if you get a new device.

Just a happy 1Password user, nut related to them in any way.

Thanks I didn’t know this.

Is it really 2FA if your password and your token are on the same device?

Yes. 2FA protects, among other things, against compromised passwords. Having both on the same device does not reduce this protection.

One could argue that authenticating via 1Password is already multi factor in itself e.g. Master Password is Something You Know as the first factor and access to a 1Password Vault is Something You Have as a second factor (since you cannot login to 1Password with just username and password, but also requires a Secret Key that can only be acquired from a device that already logged in).

In this case TOTP acts more like an insecure one-time session key.

I use LastPass for passwords and Authy for 2FA. I like the idea that two different programs have to be attacked to get access to Google, Facebook, etc. There's a little bit more friction than having both in one program but that's the point.

I'm more of a fan of buy-in without lock-in.

so one more instance of Apple effectively rendering a third party app useless. As an apple user, I love that I do not need to install an additional app but something does not feel right from an ethical standpoint. Or maybe I'm just being too touchy.

I would rather have a native UX versus Bitwarden, especially if there’s no additional cost (I have to pay for Bitwarden annually or spend time running a server) and an easy way to share creds with my partner (for delegation in the event of my passing).

Competition and a free market has perils. May the best solution win.

You can use Bitwarden for free while using their servers.

Not for family plans, unless something has changed in the last year.

Big fan of these feature being native client side. These are features, not products. We should all be a fan of improved security delivered to as many people as possible, with as little effort on their part.

You feel that way because it's ethically corrupt behaviour on the part of Apple. They are aggressively pushing out others.

Reply on news.ycombinator.com