I think a better comparison would be between GitHub and 1Password. Both started out as really excellent things for individuals and both became really awful things for individuals in their pursuit of enterprises.
I think a better comparison would be between GitHub and 1Password. Both started out as really excellent things for individuals and both became really awful things for individuals in their pursuit of enterprises.
What do you find awful about 1Password today?
People still use 1Password? There are such better alternatives. Why would you subject your self to that awful ux?
So much to list:
- They ditched their previous android app for a new one that doesn't get the grandfathered accessibility access so autofill is mostly useless...
- On mac, safari integration is consistently flaky. It regularly keeps getting blocked in a loop telling me to unlock 1password when 1password has already been unlocked.
- Passkeys are unreliable to the point of being unusable
- Autofill frequently doesn't work well where for some reason the site with the same url as saved in 1password is not offered during autofill. When 1password used to work, it helped catch phishing attempts because it wouldn't show autofill on pages that do not match. Nowadays because of the shitty autofill, people get trained to go to the app, copy the password and paste it in the website. This means that it will no longer protect from phishing attempts
- The previous behaviour of saving any newly generated password as a password object (not login) was much better. Now newly generated passwords are only available in the password history of the browser extension you specifically used.
- I can't tell 1password to ignore a specific website
At this point, the only reason I'm not using bitwarden is that search is very slow on it with 2k+ passwords.
Just to add a dissenting voice to all the complainers:
- autofill on desktop is rock-solid, it virtually never fails, much less so than any other password manager autofill
- it works great with passkeys, again rock-solid, and again the best UX of any password manager. passkeys itself are also great
- OTP code integration (only use this for non-important stuff) works great too, again best-in-class
- switch to Electron was great for most, the Windows app sucked and there was nothing on Linux, now we have a good application across all 3 desktop platforms, although it was a slight downgrade for Mac users
- autofill works fine on Android 99% of the time
- 1Password CLI and SSH agent are interesting additions but SSH has a lot of paper cuts
In general, they have by far the nicest UX and UI of all password managers. And they really seem to care. They were the first to introduce stuff like "no automatic autofill" because of security implications, their vault spec is open source (in case they go belly up), they get audited regularly. They were the first to add passkeys and actually made a site (name escapes me) that shows which services have passkeys and how to activate them.
When I quit using 1Password, it was when they dumped native apps for electron apps and quit supporting the product I’d been buying upgrades for every couple years, in order to pivot to a cloud model that lets them imposing an enterprise subscription model for enterprise users onto individuals. Dunno what they’re up to these days, but I’d be shocked if they could last six months without enterprise customers, so I know I’m not relevant to them anymore. And that’s the same way I view GitHub — individuals are financially and strategically irrelevant to their bottom line.
It’s their right, certainly, but it means I use GitHub as a Google Site replacement and my only active repo is archived whenever I’m not pushing commits to silence all the unwanted crap that comes with a GitHub repo. I’d be daft to ignore free hosting and I don’t care in the slightest that it’s one nines. Makes me laugh every time, though, to think of all those billion dollar AI-layoffs businesses having to stop AI work for a day because AI proliferation broke the freemium model and GitHub’s too hooked on being home to unfunded, mission-critical infrastructure projects to close the barn doors on free.
I can't globally disable that "autofill" also hits "submit". I want to review what it autofills before I submit. I consider this a security risk. I can disable submit only on a login-by-login basis, and my coworkers are able to reenable it again. I can't globally disable it for myself.
It much buggier for me since the enterprise/electron push.
Autofill frequently doesn’t work. Passkeys are unreliable. Creating a new password doesn’t ever get saved.
FYI I recently discovered a 1p browser extension feature named “Password Generator History”. It has a record of all generated passwords, whether their respective items ever ended up saved or not. Live saver.
https://support.1password.com/recover-unsaved-password/
Same here. I paid for my family's accounts for many years until the app suddenly became much worse. Honestly, Apple's own Passwords app has 95% of the features of, and the ones it does have work far better than the 1P equivalent. I can't imagine paying for a personal account again.
Not the parent, but the only thing I really hate about 1Password is that I can't tell it to never offer to save a specific site's password. I can turn off all offers to save passwords, or I can have the stupid pop-up ask me multiple times a day if I want to save that password. The pop-up chases me across the site until I get rid of it. Aarrgh. Blood boiling. Rage overflowing.
Other than that it's fine, I guess.
I have the same issue when using Google Passwords. One specific example: Many of my bank websites require 2FA with a code via email, SMS, or token. Each time, Google Chrome asks me if I want to update the password with the 2FA token. I have no idea how to disable it. Am I doing something wrong?
I have the same complaint about lastpass. With lastpass it's doable, but I have to keep looking up how to configure a site to never site and never ask.
It’s getting buggier and buggier, not being able to fill in passwords properly is kind of a glaring omission of a password manager (and that’s on three different computers). They keep adding features but seem to show little interest in fixing bugs. I submitted debug logs, recorded videos etc but it just trickled out in the sand. And as another poster wrote, it all started going bad with the switch to Electron (might be the rust backend that is the problem, I don’t know and frankly don’t care, it just doesn’t work as well as it did before).