1Password and other options
Not quite sure where this discussion goes but it is off topic from YNAB so I put it in journals. If it is not appropriate for this forum then the moderator can delete it.
I use 1Passowrd version 6.8... on a Mac. I just updated Safari to version 13.0 and now the 1Password extension which is used to autofill the passwords within Safari no longer works. I copied the following info about this limitation from the 1Password site.
In September 2019, Apple discontinued the Safari Extensions Gallery, which was required to install the 1Password 6 extension in Safari.
From now on, Safari will only support Safari App Extensions like the one included in 1Password 7. Because of this change, you can no longer install the 1Password 6 extension in Safari.
The last update to 1Password 6 for Mac was in May of 2018. It will only receive critical security updates in the future."
I can still use 1Password 6 but I have to copy and paste the user names and passwords from the 1password app using the clipboard. This is tedious and I have read that when you use the clipboard you are potentially at risk from hackers. I am not sure if 1Password uses the computers clipboard when using the extension or not, if it does then manually copying and pasting using the clipboard is a moot point.
I have several options from here and was wondering what others are doing to ensure password safety.
1) Upgrade to 1Password 7 (another subscription at 2.99 per month). There is an option for a stand alone purchase but I suspect you would have to buy another one in a few years.
2) Continue using 1Password 6 with copy/paste until it breaks with a later MAC update (potential security risk using clipboard).
3) Use a different password manager program, I read some reviews and Dashlane and LastPass seem like good options.
4) Trust the Apple Keychain but I am not sure if it is as secure as one of the stand alone password managers. I like using a master password that is long to open a vault.
5) Use a different browser such as Chrome but the Apple App Store does not carry those, at least I could not find them, and I like to stay in their eco system.
Has anyone else run into this problem and what are your suggestions? It looks like the subscription model is gaining popularity with many developers.
Thanks for your input.
If you like software password managers, KeePass is a good option (or one of the compatible variants for your OS listed on the Downloads page). https://keepass.info
Personally I use a Mooltipass hardware password manager (I backed their Kickstarters for the first and second generation units and use both and am waiting for a beta unit for generation 3). https://www.themooltipass.com
I use both LastPass, Chrome and Apple Keychain. The Keychain is easier imo but I don't have a Mac, just an iphone - so it's great on mobile. My company uses GSuite and enables the password manager. My understanding is these types are very secure. So I use the Chrome password manager on my computer. I also have LastPass, which I've had for years. I don't use the browser extension, but it's easy enough to find passwords when I need them.
I'm really happy with Dashlane, which works decently with my old tech (windows 7, ios 10!). But it's also a subscription - $60/year. which I think is kind of high for this sort of thing. (they do have a free version, but you can only install it on one device. If you only need it for your mac and don't need mobile, this might work for you.)
I used LastPass for a while, but dropped it eventually since I've become a bit leery of using an online password manager (and I wanted to save the money cuz budget!). Partly due to the fact that there have been a couple compromises, and partly due to the fact that if something happens to the company you may lose that data with no recovery options. A local program that uses the KeePass database format or a hardware manager you can at least backup the database and have recovery options if something happens.
I am a 1Password user as well on Mac. We have a late 2015 iMac which still runs the latest OS and a very old Macbook running El Capitan. So I also have 1Password 6.x running on the Macbook and 7 running on the iMac. My solution was to go to the family plan for $60 a year so that I could always have access to our Passwords from pretty much anywhere and share the vault with my wife. I use primarily Chrome and it works fine on Mac. It doesn't matter that it's not in the App store. Just download it from Google and use it. It will keep itself updated automatically. Using Chrome allows me to use 1Password X, which is an extension in Chrome and an Add In on Firefox. It works very well on both the newer Mac and the older one. You don't even need to have the 1Password desktop software installed for it to work, but you do need to have the web based subscription. I would suggest that you look into it at least as one option. I really wanted to stay with 1Password because we have used it for a number of years and are familiar with it.
I used KeePass for a decade or so, but switched to LastPass after reading an analysis by a security wonk that I really trust. It has its ups and downs, but overall is still the best I have been able to find. The security is so good that I am using a cloud app despite my paranoia. The benefit is that I can use it on my Chromebook, PC laptop, and phone without having to manually synchronize like I did for KeePass.