Comment by FatActor | Hacker News Reader

Comment by FatActor | Hacker News Reader

Parent Full thread

I've been reading about this intently since the press release from LP because I decided to switch to a "real" password manager over the holidays. I've had a quite a few misconceptions corrected by HN.

After using both 1pass and LP for a week, they are both equally clunky in their own special ways. LP really did bone it by not enforcing super strong master passwords AND not encrypting metadata. 1P secret key is clever, I didn't understand it clearly until recently.

Other than that, the UX/UI is essentially identical: same UI warts and bugs, same frustrating behavior, same bloat, etc. Both are equally fucking annoying with getting popups and fill-in fields wrong 25% of the time.

N.B. I have not used them in a corporate setting where you may need to manage & rotate credentials, though.

But based on metadata and lack of forcing users to create strong passwords, 1P has the right to point at LP and laugh in this case.

I don't think I have ever had 1Password get entries wrong. Some sites seem to do something to block it, and every now and then 1Password doesn't enter the state for addresses (given the variety of user experiences for that, it's not surprising).

It screwed up my capital one password change by not filling in the "re-enter" field, or offering a different password for this field, and then not asking to remember it, causing me to have to reset a forgotten password.

Don't blame CapitalOne, it is 1P's fault for offering a broken feature: if you can't properly update an "update password" form, don't offer to do so. Like tesla and its bogus FSD.

I've been changing some passwords and 1P constantly overwrites the password it just generated or when I click on a password to change it overzealously copies it which means i repeatedly have to go back to the generated password vault look at the history and copy it into the password entry. LastPass was a bit less trigger happy with the click-and-copy and smarter in detecting when a password changed. Like I said, both have bad UI, 1P is just a little worse than LP.

> Some sites seem to do something to block it

In my experience, this is often not a matter of "doing something", but rather a matter of "not doing something [correctly]". If a site does not properly tag an input field, then password managers (and other applications) will have trouble finding it.

Reply on news.ycombinator.com