

MITM attacks on me are less likely on me at this point (and I will soon be using Yubikey as my 2fa option to mitigate those). To me, the security of data in the cloud is about the same between 1PW and Apple right now, and the big question to me is "what is my threat surface"? Most likely security issues for me are 1) phone gets stolen (possibly with passcode), or I get mugged and they force me to give them the passcode, 2) I lose my phone, 3) someone does a SIM Swap attack on me. If someone gets access to your apple account (like the recent stories about someone watching you enter your PIN, and then stealing your phone), then everything in the apple account is compromised and criminals can really clean house, if you have everything in keychain. I don't like the whole "just trust us, it's simple!" marketing spiel because I want to control my data. I export my 1PW vault to an encrypted USB drive once a quarter or so, and keep it in a bank safe deposit box, as a backup, in case something happens. The main reason I use 1Password rather than keychain is that I don't want to be locked into Apple's ecosystem, and I want to be able to easily export / save / backup my passwords, and I think 1PW better addresses my threat surface. Now, I think it's less likely, based on both what we know about Apple's security culture and the lack of security culture at LastPass that has become apparent, but still possible. The same issue could happen to Apple and they could lose all the vaults. What do you mean by you "need an actual device"? With LastPass, the problem was that someone got into the back end. 💙īetting that Apple would "be held more responsible", you mean Apple would get governmental regulatory actions against them if they lost the password vault? Or do you mean customers would stop buying Apple products if keychain was compromised? I don't think so, unfortunately.


We'll always be marked by an official flair, and will always love both 1Password and you. You'll see some friendly people from the 1Password team ready to help you - keep an eye out for /u/1PasswordCS-Blake, /u/agben, u/Zatara214, and more of us! Read recent coverage on us and see the 1Password love.Bits will be marked by an official flair. We'd love to hear from you here, on Twitter, or via email.1Password is designed to be easy, secure, and seamless.More on, and why you need a password manager. Available for Mac, iOS, Windows, and Android, syncing seamlessly between all of them. It's simple, secure, and seamless, and it's one place to store your passwords, secure notes, and documents-all protected by the Master Password only you know.

Welcome to r/1Password! This sub is a great place to discuss 1Password, password managers, and internet privacy/security in general.ġPassword is the award-winning password manager designed to make your life easier.
