Apple to Debut 'Passwords' App, in Competition with 1Password, LastPass(bloomberg.com)
bloomberg.com
Apple to Debut 'Passwords' App, in Competition with 1Password, LastPass
https://www.bloomberg.com/news/articles/2024-06-06/apple-to-debut-passwords-app-in-challenge-to-1password-lastpass
49 comments
I’m mostly in Apple’s sphere of influence, but I still need my password manager to work from other people’s Android devices. So no thanks Apple, I’ll stick with Bitwarden.
Non-paywall: https://archive.is/2024.06.06-231437/https://www.bloomberg.c...
If this is decent, I’d probably switch. I loved 1Pass 7. Then they bloated it. I’ll give them that the SSH Agent is pretty cool, but there are alternatives to that.
If this is decent, I’d probably switch. I loved 1Pass 7. Then they bloated it. I’ll give them that the SSH Agent is pretty cool, but there are alternatives to that.
I'm in the same boat. I've been using 1p for a long time, and I'm generally a fan and advocate because it's the best password manager I know of. But I would definitely switch if a better product emerges.
The experience has gotten really frustrating over the years. 1Password used to be a delight to use, now it's bloated and unbearably and inexplicably slow at times. I much preferred the native app over the current electron version. The browser extensions are finicky. I don't love that the only option is for 1p to host my vault for me, but whatever, I guess I trust them.
The experience has gotten really frustrating over the years. 1Password used to be a delight to use, now it's bloated and unbearably and inexplicably slow at times. I much preferred the native app over the current electron version. The browser extensions are finicky. I don't love that the only option is for 1p to host my vault for me, but whatever, I guess I trust them.
Hi @caseyohara,
You might want to try our modern, open-source, cross-platform alternative[1]
The self hosted server v1 will land in the next few weeks.
[1] https://saveoursecrets.com
You might want to try our modern, open-source, cross-platform alternative[1]
The self hosted server v1 will land in the next few weeks.
[1] https://saveoursecrets.com
It's nice to see it will work on Windows, but it's pointless to me if it doesn't also work on Android.
Huh, this will be great for the normies out there, as I assume Apple will tightly integrate it into safari and whatnot, easing them into using a password manager.
This already basically exists, it’s a table inside settings with all the functionality I used to use in 1Password. Even handles 2FA codes seamlessly.
My guess is this app will be mostly just an extraction of that table from Settings.
My guess is this app will be mostly just an extraction of that table from Settings.
I’ve mostly switched over to this over the past year already, from my previous password manager BitWarden. My only complaint is the current Safari/iCloud Keychain doesn’t support arbitrary fields like BitWarden or other password managers do. I often keep crucial info about accounts in such fields, but it’s not possible with Apple’s current implementation. Hopefully their new Password app will support it.
Yes, having a place to store security questions like whatever my favorite flavor of ice cream was 9 years ago (looking at you, United) would be nice and the main feature I missing now.
I still generate random passwords for the questions. I don’t like that someone who knows me well could use them to gain access to an account.
… but yes we definitely need extra fields for storing that and lots of other related data.
I’m a 1Password user and one of the features I really like is that it saves ALL of the fields from a signup form along with the password. That has saved me a couple of times where I needed to know some value I had entered at the time I created an account.
… but yes we definitely need extra fields for storing that and lots of other related data.
I’m a 1Password user and one of the features I really like is that it saves ALL of the fields from a signup form along with the password. That has saved me a couple of times where I needed to know some value I had entered at the time I created an account.
It doesn’t support arbitrary fields, but does have a plaintext, multiline-supporting “notes” field. That’s where I put security questions & answers.
Are you talking about Keychain Access, or do newer versions of macOS have something directly inside System Preferences?
Newer versions of macOS have something in addition to Keychain Access, known as Passwords. In fact, when you launch the Keychain Access program it now asks if you want to use "Passwords" or "Keychain Access", the former opening what the parent speaks of, and the latter continuing to the legacy Keychain Access.
Interesting.
[deleted]
Yeah I’ve been using this for over a year and love it. The integration is (obviously) so much better than any other pw manager.
I like Apple and their hardware but knowing they can axe my account indiscriminately makes this an immediate 'no'. Very happy with Bitwarden.
What makes you think Bitwarden can’t indiscriminately axe your account?
you can easily export your bitwarden data and self-host a bitwarden service
Apple, love you. A password app that isn’t cross platform in 2024 is DOA. You keep claiming you’re becoming a services company, but then you keep doing things like this that makes me think you have absolutely no idea how to be a services company.
But it is cross platform. It works on iPhones, iPads, Macs, and Apple Watches.
Is there any other platform?
Is there any other platform?
To be clear, before anyone gets upset - I don't expect Apple to resell other people's computers - but even as someone who has been exclusively and extensively Apple for a decade or more, their Trade In prompt always came across as condescending and insulting. "Want to trade in your computer? Let's see what it's worth! Is it Apple? Or Other?" and if you choose Other, it's "So we'll recycle it for you." with no further questions.
Yup.
It’s not uncommon to have Windows and Android in the mix even for households that are all-Apple at home.
Not to mention expectation of multi-browser support, Safari-only is not going to work.
It’s not uncommon to have Windows and Android in the mix even for households that are all-Apple at home.
Not to mention expectation of multi-browser support, Safari-only is not going to work.
But what about those of us who only use Apple platforms?
Also, “Set up iCloud Passwords on your Windows computer”: https://support.apple.com/guide/icloud-windows/set-up-icloud...
Yeah but for me Linux (and Android) is a lot more important at home than windows
Just curious, has Apple ever claimed they’re a services company? I’m pretty sure that’s just what analysts claim Apple is trying to pivot to because they make a lot of money from subscriptions.
Doesn't making a lot of money from services kinda de facto mean becoming a services company?
I agree it's different from like Microsoft as their hardware and walled garden is still key. But they certainly have been ramping up services especially if you consider non-IT stuff like Apple Music and TV+
I agree it's different from like Microsoft as their hardware and walled garden is still key. But they certainly have been ramping up services especially if you consider non-IT stuff like Apple Music and TV+
Oh definitely, they have tons of services and I personally use most of them. I was mostly just questioning this from the gp:
> You keep claiming you’re becoming a services company, but then you keep doing things like this […]
It seems to me that Apple doesn’t see itself as a services company despite offering all sorts of services. I think they still largely see themselves as a hardware company selling Apple hardware, and the services are just there to enhance that hardware or make it more enticing.
> You keep claiming you’re becoming a services company, but then you keep doing things like this […]
It seems to me that Apple doesn’t see itself as a services company despite offering all sorts of services. I think they still largely see themselves as a hardware company selling Apple hardware, and the services are just there to enhance that hardware or make it more enticing.
You can do that today.
You can use an unreleased "Passwords" app on Windows today? One that, based on leaked information so far, only runs on iOS, iPadOS, and MacOS. Where can I download it?
iCloud != the new Passwords app, which is what we’re talking about.
Do you also think the Messages app is cross platform because there’s an iCloud app for Windows?
Do you also think the Messages app is cross platform because there’s an iCloud app for Windows?
iCloud for Windows already includes a Passwords app, that syncs to the same Keychain database in iCloud that the new macOS Passwords app will sync to.
iCloud for Windows does not include a Messages app.
Not really sure which part you're confused about?
iCloud for Windows does not include a Messages app.
Not really sure which part you're confused about?
i disagree, it's free
[deleted]
Wonder if it's going to be storing its data on iCloud in encrypted or unencrypted form?
Unencrypted form, or even encrypted where Apple gets to know the encrypted keys, would likely make this an attractive target for various groups (of both the good and bad varieties).
Unencrypted form, or even encrypted where Apple gets to know the encrypted keys, would likely make this an attractive target for various groups (of both the good and bad varieties).
This will undoubtedly be a front-end to the existing iCloud Keychain password store. Details of how this works are explained in "Apple Platform Security":
https://help.apple.com/pdf/security/en_US/apple-platform-sec...
https://help.apple.com/pdf/security/en_US/apple-platform-sec...
It would be surprising if it is not end to end encrypted.
Since it doesn’t work on android it’s effectively an anti competitive lock in feature? We really need new antitrust laws and aggressive EU style enforcement
Please no. There are many alternative cross-platform password managers one can use instead. Please don’t make my software and devices suckier and harder to use to appease some EU bureaucrat.
What about Google asking you to use chrome each time you click on a link in gmail, or not letting you copy an address without being taken to maps when you search on your phone?
Google and MS also need to be fined and split up.
Can and do third parties use Secure Enclave? Any HN users that know?
The Secretive SSH Agent uses it to store SSH keys: https://github.com/maxgoedjen/secretive
LastPass is no competition to anybody. Or is it?
1Password barely works in safari if you use profiles. I’ve filed a bug in the past asking them to investigate and got back a boilerplate “try reinstalling” response. I don’t have the energy to chase down bugfixes in software I paid for. I’ll probably switch to this.
Personally I plan to continue using BitWarden because it’s cross platform.