top | item 20417832

1Password: Standalone / Local Vault Option Gone?

350 points| Tomte | 6 years ago |discussions.agilebits.com

360 comments

order
[+] jakebasile|6 years ago|reply
I've been a paying subscriber to 1Password for over two years now and had the standalone version for years before that, and the way they responded in that thread really rubbed me the wrong way. Enough that maybe I'm going to start looking for other options. Maybe I'm just in a bad mood?

The OP just wanted to know if the feature was gone, and if so when did it get removed (maybe to find an archived version of the app?), and lastly why it wasn't clearly communicated, but you can just smell the smug in the responses. It's hard for me to read their little "cute" emoji as anything but sarcastic, which is reinforced by one of the developers chiming in about how they must be asking to "make their mobile apps free" and the other guy talking about how with so many users anything they do will of course be found out.

[+] noneeeed|6 years ago|reply
Likewise. I've been a long-time user, and currently a subscriber, but I've just found the direction 1P is heading, and the way AgileBits communicate a lot of this to be frustrating.

It's difficult to explain, but every time something like this comes up their responses frequently seem "off" and tone deaf.

I'm not sure they understand how much their product can become a part of how people go about their daily life, and how changing that, no matter how small, can have pretty significant effects, with an accompanying emotional response.

A while back they changed the way their vaults worked and you had to upgrade them. I've never been more nervous about an update to anything than I was with that update. The way the software communicated what was going to happen really didn't help, and there was a real feeling that this could all go horribly wrong.

Something I respect from Basecamp is their commitment to keeping their old products around (and keeping them maintained, even if they get no new features). They understand that they become a part of people's lives, and you mess that up at your peril. "Sunsetting" products or features has an impact on your customers that you need to be prepared for.

For reasons that are difficult to articulate I just don't trust AgileBits to not completely bugger up things for me in some way by changing something that they regard as unimportant, but to me is significant.

Even to me, this feels like I'm probably overreacting, but my passwords and online identities are so important that even the smallest hint of untrustworthyness is unnerving. The impact of losing all those details would be massive.

[+] stevenjohns|6 years ago|reply
Yep, I feel the same way. The responses went downhill really quickly. I only just jumped back onto the MacOS bandwagon and was looking at resubscribing (I've had an awesome experience with their email customer support reps in the past which brought me back) but if this is how the public facing side of the development team acts... yikes.

I'll be much more open to alternatives now than I would have been yesterday.

[+] rudedogg|6 years ago|reply
I'm on the Catalina beta and the Safari Extension for 1Password 6 doesn't work (Apple only allows extensions from the App Store starting with Safari 13 - so it's not really AgileBits fault).

I chose to migrate to storing everything in iCloud Keychain instead. I understand why companies want to move to the subscription model, but I can't justify spending $36/year for an app to store my passwords.

[+] foobarqwerty|6 years ago|reply
Also a paying subscriber, and also appalled at the response from 1P team.

Will keep this in mind when recommending to family and friends, which I do a lot, and will definitely keep an eye out for alternatives moving forward.

The latest extension for Chrome on Windows and Mac barely works for me half the time with the latest update.

[+] dawnerd|6 years ago|reply
It seems their software quality in general have been going downhill recently. Lots of changes just for the sake of changing. The new extension doesn't work about 40% of the time or require multiple keystrokes to get it to pop up. The windows version is just, ugh.
[+] anthonybsd|6 years ago|reply
Same here. I've been using 1Password for over 11 years. Paid for multiple licenses, family subscriptions, upgrades, etc. Their recent behavior which indicates direct hostility to their long time users and obvious money grabs. Since it looks like it's subscription model no matter where I turn I'm thinking about migrating to LastPass. At least they are more or less transparent in their pricing and future intentions.
[+] sashk|6 years ago|reply
I feel exactly same. Recently I complained about decreased usability issues with re-worked 1Password mini and... felt exactly same. I won't be looking for a replacement just yet, but feeling is right there. Dropping support for standalone vaults is not unexpected development.
[+] brantonb|6 years ago|reply
I was turned off by their smugness back before they had a Windows version. Their justification was that the platform didn’t allow them to build the type of beautiful software their high standards required. They’ve always had these attitudes that have rubbed me the wrong way. I’ve never gone onto their subscription model, but I’m wondering if iCloud would work for me since I’m fully in Apple’s ecosystem.
[+] swift532|6 years ago|reply
I find it very infuriating in general when someone uses a cute or smiley emoji after telling me something negative. I'm sure that mostly I'm paranoid and irrationally irate about that, but I can't help thinking that people are rubbing it in my face when they do that. Am I the problem?
[+] re|6 years ago|reply
I don't think the responses are smug. Ben in particular stands out as patient, forthright, and apologetic.

> one of the developers chiming in about how they must be asking to "make their mobile apps free"

That isn't the actual quote. The developer is pointing out that the apps are "free to use as companions to our desktop apps".

> the other guy talking about how with so many users anything they do will of course be found out

This did come across clumsily, but it was in response to the false dilemma "Was it forgotten, or deliberately not mentioned in the hopes nobody [would notice]?"

[+] matwood|6 years ago|reply
Reading that thread makes me happy I ditched 1Password when they first moved to a subscription model.
[+] hackits|6 years ago|reply
Only smug i could tell was in regards to their free app offering, and considering it costs money and resources to maintain those free services their viewpoint is understandable. The feature was removed, they thank them for the feedback for being upset that the feature was removed.
[+] ken|6 years ago|reply
One thing I've learned about software in general is that I never want to be outside of the primary use case. If you're not using it the same way that the people building it do, it's going to be a pain to use, and your requests will be ignored.

For me, 1Password wifi syncing (with local vaults) never worked quite right, and I don't think that feature has been touched by its developers in all the years since I first bought a 1Password license. It's never going to be. They're all in on their own cloud service and subscriptions.

I don't hate 1Password for using subscriptions -- that's their prerogative -- but I wish I'd known they were going to bail on the Mac-as-digital-hub architecture. That was 100% why I bought it.

I'd describe that pivot, too, as a communications breakdown.

[+] gropius|6 years ago|reply
> One thing I've learned about software in general is that I never want to be outside of the primary use case. If you're not using it the same way that the people building it do, it's going to be a pain to use, and your requests will be ignored.

While this might be true in general, one of the main advantages in choosing FOSS is that features used by a small subset of users are more likely to be kept than for proprietary software.

When a software package starts out, early-adopting power users build its popularity and help shape its growth ... until the package becomes so useful that it is now marketable to the masses. Then, for proprietary software at least, there's a strong incentive to streamline and remove anything the masses don't care about...which can alienate the same people who helped make their package great.

For FOSS, there's powerful motiviation to retain features that even only a handful of power users rely on -- lest that project be forked.

I can't remember the last time I've been feature-burned by a FOSS project. My feature-burn scars for proprietary software, however, are many -- and at least a few are quite deep.

[+] DavideNL|6 years ago|reply
You don't need a subscription though. You can still sync through iCloud (i use iOS & macOS), without a subscription.
[+] Volt|6 years ago|reply
To be honest, if they're going to do stuff like that they shouldn't be offering those features at all.

Developers should stick to implementing features they're likely to maintain.

[+] Fnoord|6 years ago|reply
> One thing I've learned about software in general is that I never want to be outside of the primary use case. If you're not using it the same way that the people building it do, it's going to be a pain to use, and your requests will be ignored.

If there is an obscure setting somewhere which makes something work well for you while you become a minority of users in the process, you would not use it?

[+] jaykru|6 years ago|reply
Really disappointing to see so much bootlicking in this thread. Yes, 1Password is a great product and, yes, AgileBits is a great team of developers. But this change sucks and spits in the face of long-time paying customers who have come to rely on 1Passwords's local features.

1Password can be both worth paying $3 a month for an also making a really bad anti-user decision here. These are not mutually exclusive.

As a former long-time 1Password user, I recently moved to using pass [1] after using their cloud features for some time. At the time I mostly moved for better change tracking with git, but I'm feeling pretty glad about the decision now that they've made this awful change. I'd highly recommend moving to pass or some other FOSS for this class of tool. Why trust your passwords to something outside your control?

[1] https://www.passwordstore.org

[+] oil25|6 years ago|reply
This is the absolute reality with closed source proprietary software: the user has no say nor ownership in the product; they are in effect granted a revocable license to use a set of features for some indeterminate period of time. The owners of the software licenses may modify, without the user's consent, or even knowledge, the software for any reason and any purpose. On modern closed source operating systems with automatic updates, it's often even impossible to revert to a prior version. I'm not against this type of software, it has its place and purpose, but why trust it for something as critical as personal identity management and authentication? Especially when there are so many free (as in freedom, not price) and open source alternatives on the market?
[+] vbezhenar|6 years ago|reply
I feel the same way. Everyone is praising 1Password, so I bought it and used it and while I could see that it's useful for many people, I have basic needs and may be a bit different use and recently as I started using KeePass (I'm on Windows) it's just turned out to be the perfect password manager. Last bit was KeeAgent plugin which allows me to use encrypted SSH key effortlessly. I like open nature of KeePass and I like that it's just password manager, no fancy browser integrations, I just copy&paste password when I need it and that's about it. No auto sync, I just push the button and my database synchronized to my webdav server, easy, fast and reliable and I understand and control every bit of it. And all that free, of course, it's not like 1Password asks for a lot of money, but I'm living in a poor country and even those $36 is something I have to consider. When I can rent an entire VPS with a lot of services for that price, it's hard to justify paying that kind of money. I'm OK with one time buying of software or even with buying new version (as long as it's optional), but I really don't like subscription model. I understand that developers want their salary every month, so it's kind of tough topic.
[+] sleavey|6 years ago|reply
Pass is great, I moved to it from KeePass about a year ago and have never looked back. It uses your gpg key to encrypt passwords and syncs via git. Ridiculously simple and cloud nonsense free.
[+] wyclif|6 years ago|reply
I also migrated to pass and then let my 1Password account freeze, and couldn't be happier. I like the philosophy behind pass a lot more, it seems like the UNIX-y way passwords should be stored, encrypted, and maintained.
[+] akskos|6 years ago|reply
I'm considering moving to Pass from KeePass. Does anyone have experience with syncing it to Android?
[+] drcongo|6 years ago|reply
This looks very interesting, do you know if there's any way to import 1Password passwords into it?
[+] sugarpile|6 years ago|reply
1password has a history of being terrible at announcing product changes and unilaterally making decisions that negatively impact customers. They removed autosubmitting passwords a couple of months ago and then:

- lied about the reasoning by claiming apple mandated the change despite apple's change only affecting safari which I'm guessing makes up the minority of their browser userbase

- consistently deleted comments on their forums that pointed out they could have kept their already existing, working code in place for chrome

I rolled back to version 6 and suggest anyone else do the same.

[+] voska|6 years ago|reply
AgileBits has been pushing people to the 1Password subscription model for a long time now by neglecting their "lifetime" desktop customers.

The 1Password chrome extension (not 1Password X) used to work great, then it started crashing about daily for me after one of the updates, forcing me to quit Chrome to fix it. The final straw was when they "updated" the extension to a design that looks 2 years old and is far less functional.

I finally gave in and tried out the subscription model. Here's why it's worse:

    - The 1Password X extension is standalone (doesn't need the desktop app) so when you have three different Chrome profiles as I do, you have to sign in to 1Password 3 times. Super annoying.
    - They force me to store my data with them. Sure they're the most trusted in the industry and do their security audits, but if they get breached, I'm fucked. 
    - The Command + \ shortcut to autofill and login doesn't work on 1Password X
    - They could have just said that their current business model wasn't achieving the goals and that they needed to charge more (I would have paid more/for a subscription) but instead, they beat around the bush by creating a new product that is inferior.
I no longer recommend them to others for password management. I tell friends and family to use iCloud now.
[+] PascLeRasc|6 years ago|reply
I'll go against the grain and defend this. I really, really love 1Password - it's UI is incredible and it works so well - it follows the "don't make me think" philosophy which I really appreciate and makes me feel respected. It feels like a default piece of Apple software in how well it integrates with OS X and iOS. The desktop PDF QR scanner is something I didn't even know was possible to do with software, it blows my mind every time I use it. 1Password X is perfect for Linux and a great solution to the distro fragmentation problem.

So I don't know more about password management than Agilebits. They have a long history of really good ideas for their software. If they want me to use their cloud instead of local vault, that's probably a good idea. I'm more than happy to pay the $2-3 per month to have access to this, and knowing they have recurring revenue gives me confidence that they'll be around for a while.

[+] colechristensen|6 years ago|reply
Being good at what you do does not excuse shady removal of features once your user base is big enough to drop functionality.

Or more precisely it makes a person wonder what the next step will be to alienate users which aren't aligned with the vendor's interests.

[+] filmgirlcw|6 years ago|reply
I’m in total agreement. It’s the most important app I use and I’d pay 5x the $60 a year I spend on the family plan without question.

I used 1PW with Dropbox for years and and years and it was a great solution — but I trust 1PW more than Dropbox to protect my stuff (and certainly more than I trust myself to setup and maintain a secure sync server), and I love 1PX. Also, the Windows app is lightyears ahead of where it was (the Windows Hello support is great), which I never thought I’d say.

Yes, I know other solutions are cheaper, but I have been a 1PW user for 12 years and I want to ensure it’ll be there for 12 more.

Plus, for me, the UX matters. I don’t just use 1PW for passwords, I keep software license, secure notes, all kinds of stuff in it. I’m not a fan of the subscriptionfication of course of everything, but this is one product I’ll make an exception for.

[+] dwild|6 years ago|reply
> I'll go against the grain and defend this.

People mostly complains about how they handled the situation, not about the product directly (there's many people that say that the product is superior yet will migrate because of their response).

They weren't respectful and they didn't acknowledge their mistake of not showing any warning anywhere (instead deflecting to absurd justification).

> knowing they have recurring revenue gives me confidence that they'll be around for a while.

Recurring revenue is a thing that help sure, but supporting your existing user base (which he was part of) is another one. That thread show how they treat them. That give me confidence that if I get an issue, I'll get treated just as badly.

I'll personally will be looking at an alternative, even though the product is pretty great, support is part of it (and in the case of a password manager, that's quite an important part of it).

[+] valarauko|6 years ago|reply
>1Password X is perfect for Linux and a great solution to the distro fragmentation problem.

Yeah, no. 1PX has no means of data export. After 10 years on Lastpass, tried to give 1P a shot. Quickly grew frustrated within a month of the linux experience, and decided to move to Bitwarden. Turns out 1PX has no means of export, and I was stuck having to migrate each account by hand, and redoing the TOTPs. Bitwarden is substantially worse in terms of the UI, but at least I don't have to deal with vendor lockin.

[+] kungtotte|6 years ago|reply
Keepass (I use keepassxc) works great across all three platforms I've used it on (Windows, Android, Linux) and the database is less than 100KB so it's easily shared on the free tier of any cloud storage provider.

1Password does have a good UX, but it's not the only option that does.

[+] ajmurmann|6 years ago|reply
It seems like sometimes products hit a point where they are actually pretty much done and consumers would be best served by the product going into maintenance mode. Of course that doesn't happen because companies must grow and the spice must flow. In that case the product end up changing things for the sake of change or to enable additional monetization. I'm pretty sure Evernote hit that point years ago and could see the same argument being made for 1Password.
[+] cantrevealname|6 years ago|reply
> I have a workflow where I use 1Password on my phone - locally, no sync, do not want sync, can not use sync. Obviously this is not my main way of using 1Password. On that phone, I often remove 1Password and reinstall it.

My guess is that he's doing this when he crosses borders or in other situations where he might be subject to an intrusive search. So he carries a minimal set of passwords that he needs for that trip in a local vault. Maybe just his airline login, a throwaway email account, and an innocuous credit card account. If he's forced to login to his 1Password account during a search or inspection, he won't reveal his lifetime accumulation of accounts and passwords.

[+] sundvor|6 years ago|reply
This is a great use case.
[+] ROFISH|6 years ago|reply
Count me as one of the users who are getting annoyed at 1Password’s attempts at recurrent monthly spending. In addition, while their cloud service is probably fine, the best option is to locally sync and not involve the cloud at all.

I would much rather just keep using the “local app” license, which sadly isn’t even available for sale anymore. In fact, I can’t even use my Windows license I bought back in the day.

One of these days I’ll probably just stop using 1Password and move on to something else. Are there any good free/one-time purchase locally syncable password apps that works on Mac/iOS?

[+] jsgo|6 years ago|reply
“Thanks for clarifying. All the Pro Features you paid for are still available to you.”

This seems bogus. I bought it on mobile for $10 or whatever it was and on Mac and the migration to the subscription model was basically a forced deal as far as I could tell when the update a year or two ago to the free apps on subscription change happened. Hate that aspect.

And “thanks for your feedback” seems to be the new F off.

[+] bigiain|6 years ago|reply
I'm a paid licence holder for 1Password, but am uncomfortable with being more and more forcefully pushed into using their cloud-based subscription service (which while I use for work, I'd rather _not_ us personally).

What're people's experiences with alternatives to 1PW - ones that do device-device sync and work at least across iOS/macos and ideally integrate nicely with browsers and apps on both those platforms? Is BitWarden ready for prime time for something as critical as secure password storage yet? Does it's iOS app take advantage of the secure enclave features of iPhones?

[+] fcarraldo|6 years ago|reply
Wow, this is tremendously bad communication from their team. I don't care about the local vault feature, but the lack of empathy in the responses from AgileBits is certainly making me reconsider my family account.
[+] predakanga|6 years ago|reply
The feature has been specifically disabled in the iOS app, still available on macOS for now.

It's extremely disappointing that the staff are being so evasive regarding their communication. For a product that is necessarily built on trust, that's the last thing that I want to see.

[+] natch|6 years ago|reply
In my view this company took what used to be a perfectly capable, useful, and reasonably priced (well kind of high priced) app, and abused the idea of subscriptions to parlay it into a way to pay for their swimming pools and SUVs for life. People deserve to get paid, sure, but we are talking about a small utility app here. They knew they had gotten some lockin and they played it to the hilt, to the detriment of users. All the complexity they have added is optional and arguably worse. The sense of entitlement is breathtaking.
[+] smsm42|6 years ago|reply
1password seems to be slowly but surely inching towards pay-by-month model for all users, which is I assume great deal for them (persistent recurrent revenue!) but terrible deal for the user (once you are in, you are on the hook forever or you don't get access to your precious passwords). I've been a happy user of 1password for a decade. Looks like it's time to consider alternatives?
[+] 35803288|6 years ago|reply
Paid user here, so I am not affected by this problem.

However (writing this complaint here since I am sure they are monitoring this 3d) I am really disappointed by the way agilebits handled this matter.

1) the release notes were shitty and they know it; 2) no one asked for a free app but if you do that, taking it away is a baaaaaad idea; 3) it took me a lot of time to convince family members to use local vaults on their phones, if the feature is removed and they will complain with me I will be extremely unhappy.

[+] 8fingerlouie|6 years ago|reply
I've been using 1Password since basically forever.

With the introduction of a subscription model, i started looking for alternatives.

While i get why companies jump on the subscription bandwagon, i on the other hand flat out refuse to pay a subscription fee for software. I don't mind paying for software, but the subscription model is not for me.

First, with a paid license for version x, i decide if the "latest & greatest" is worth it to me. If it isn't, i'll just stay with my old version.

Second, I'm old enough to know that the "latest & greatest" also includes the latest & greatest bugs. I want to decide when i upgrade. (Yes, i run Debian Stable!)

Third, as everything i (used to) use has migrated to a subscription model, it's becoming rather expensive to get anything done. Yes it's only "$X.99/mo", along with the 20 other things that are also "$X.99/mo".

For this particular use case, I've been evaluating many different solution, and i've more or less settled on [pass](https://www.passwordstore.org/). It works on Mac OS and Linux, has a very decent iOS app, and "kinda" works on Windows. I use it through WSL on windows.

It's nowhere near as polished as 1Password is, but it's mine, it's free, and it fits my needs.

I did evaluate [Bitwarden](https://bitwarden.com/) as it seemed like the next best choice to 1Password, but the "non subscription" version doesn't support 2FA tokens,

I still use 1Password frequently, but the second the local vault is gone, i am as well.

[+] phs318u|6 years ago|reply
May I very strongly recommend that you check out:

https://pwsafe.org/

Open source. Bruce Schnieir designed. Windows, Mac, Linux, Android, iOS versions. Dropbox and iCloud sync available as well as standalone operation. Yubikey support.

Need I say more?

[+] chrischen|6 years ago|reply
They (though admittedly along with many others) have partaken in a terrible trend of switching to subscription pricing for effectively non-subscription services.

Instead of having the option of letting me pay and upgrade if I decide to, I am forced to continue a subscription in order to continue using any version of 1Password (excluding legacy versions).

[+] frankwiles|6 years ago|reply
I’m fine with them making the business decision to head in this direction. Just be up front about it. Publish a timeline, stick to it, and be done. I’m a huge 1Password fan and have no problem spending 2X what I do (for a team) but have to admit this and the few times I’ve ran into pay weirdness over the last couple of years has slightly shaken my faith in the app and company. And THAT is not the kind of feeling you want with something you have to trust so so so very much.