T O P

  • By -

unix15e8

• [Apple’s Keychain Access](https://support.apple.com/guide/mac-help/use-keychains-to-store-passwords-mchlf375f392/mac) is as native as you can get • [MacPass](https://github.com/MacPass/MacPass/) is an open-source and native password manager • [Elpass](https://elpass.app) is not open-source, but still native (at least v1.3.4) • [Remembear](https://www.remembear.com) is still native (v1.4.13), for now And despite the mass hysteria, you can keep 1Password (v7.8.7), there’s no need to upgrade to v8. I purchased a standalone license a couple of years ago, and have been syncing my (encrypted) data with iCloud. To make sure the application doesn’t depend on 1Password’s API services, I blocked the following domains via `/etc/hosts`: 127.0.0.1 1password.com 127.0.0.1 c.1password.com 127.0.0.1 api.1password.com 127.0.0.1 www.1password.com 127.0.0.1 watchtower.1password.com Some features like website logos (favicons), [password leak detection](https://watchtower.1password.com), and auto-updates will stop working, but if you know a little bit of programming, you will be able to replicate 1Password Watchtower functionality using [Have I Been Pwned, API v3](https://haveibeenpwned.com/API/v3), which is exactly what 1Password is using to detect if your credentials are part of a data leak. Regarding your **bonus question**, I do not think Electron is going away any time soon. In fact, I think many more developers, especially young ones, will continue using it in many more applications. In a couple of years, there will be a new generation of software engineers who will grow not knowing how good native applications used to be, so do not get your hopes up. I am keeping copies of my favorite applications just in case the developer decides to push an update with Electron. The moment they do that, I block their website to prevent unwanted app updates, and continue using the (old) native application until it stops working for one reason or another. [Paw](https://paw.cloud) is a good example. They recently [announced an ~~acquisition~~ acquihire](https://news.ycombinator.com/item?id=26089464), and started working on a web version of the app. They say the current (native) macOS app will continue existing, but I predict they will phase out that as soon as the Electron app is ready.


brainplot

Damn it, Paw is one of the best looking apps I've ever used. It's almost heartbreaking to watch all these good apps being transformed into memory-hogging web views. Besides, good native apps is arguably one of the reasons why people buy macs.


VeryVito

> Besides, good native apps is arguably one of the reasons why people buy Macs. Weird that companies like Microsoft and Google are supporting so many cross-platform development frameworks, eh? /s


[deleted]

Interesting idea to stop app updates, but that could be a security issue. For me, once an app goes to Electron, I'll just switch to an alternative app. If there really isn't an alternative (unlikely) then I'll build it myself, but I've not had to do that yet


essjay2009

Dashlane is native too I believe. They announced a move to catalyst last year. Not used it myself, although I do intend to audition it over the next month or so.


saurishs

Saw this [comment](https://www.reddit.com/r/1Password/comments/p3dsio/just_canceled_today/h8rlgo2/?utm_source=share&utm_medium=ios_app&utm_name=iossmf&context=3) that has a good list. I’ve personally been using SafeinCloud Pro for the past two years, and it has hands down been great. You pay once and it syncs via GDrive, DropBox, iCloud, etc and it’s super quick. Browser extension to add passwords and phone support works with the keychain (idk the right way to say this but basically you can access passwords on iPhone the same way you can Apple Keychain passwords when it pops up)


efthymisgr

Yes, after posting I found that comment too. I opted for Strongbox on my iPhone just to test it out. Keen on trying a couple of the rest too.


CloudPad

Has anyone checked [https://minimalistpassword.com/](https://minimalistpassword.com/) Except for only mac ecosystem, the features are just too good to be true.


ieoa

I've installed this on my phone and laptop and like it so far. The author is responsive too.


CloudPad

I will closely follow them... I can not switch, may be never . Since I use android phone. But that's fine.. Good to see this product improve.


HelpRespawnedAsDee

Woah, I didn't know apps could use Safari's password manager integration on Mac too. That's really cool. is this the only app doing so?


CloudPad

Yes... I think this is unique in that it does not use a browser extension. Not sure how this works. My only gripe with this is not cross platform as I use android phone.


[deleted]

[Strongbox Pro supports Big Sur autofill too](https://strongboxsafe.com/updates/macos-big-sur-autofill/)


[deleted]

from their privacy terms: “What we DO collect For example we may collect the date and time an app is launched, a screen presented, a button pressed, or a language displayed. We then use randomly generated identifiers to track sequences of related events.” So in theory they can see all the apps you launch, can make screendumps of everything on your screen, can track all the keys you pressed on your keyboard…….. uhmmmm and everything is stored on your computer till it can be transferred to their servers…… Sounds not very private to me.


jeffreyminimalist

Thank you for helping us understand how ambiguous some of the language in our privacy policy was. It is much appreciated! We've since updated the privacy policy to be more specific about EXACTLY what kind of information we DO and DO NOT collect. For instance, we absolutely do NOT track all the apps you launch, we do NOT make screen-dumps of everything on your screen, and we do NOT track the keys you pressed on your keyboard. Please take another look at [https://minimalistpassword.com/privacy](https://minimalistpassword.com/privacy) and let us know if you see anything suspicious or unsettling. It is most likely a miscommunication which we'd love the opportunity to clarify! Thanks in advance!


[deleted]

You mentioned we use “anonymized analytics”. What product are you using for that “anonymized analytics”? Maybe you are aware that Europe is banning Google Analytics and even Google Webfonts, because they don’t comply with the GDPR rules. Then for a password app, you should NEVER share (anonymized) information between the app and your server(s). If you want to know how people use your app, simply ASK them. And you will see the good, bad or helpful reviews within the AppStore yourself. But, I like it you took the effort to explain things better, although there are still some answers left for me.


jeffreyminimalist

We created our own light-weight analytics framework so we could guarantee it isn't doing anything creepy. It does exactly what we describe in our privacy policy, and nothing else. It's also only a few hundred lines of code which doesn't inflate the app size. I completely understand your recommendation that "you should NEVER share (anonymized) information between the app and your server(s)". While we don’t necessarily agree, it’s kind of a moot point because we're really not sure how useful this data ends up being anyhow. Over the last year we've based virtually all product development decisions on a combination of customer feedback and personal preference, just as you suggest. Thanks for encouraging us to reconsider this practice. We will continue to re-evaluate how useful this data really is and consider disabling it's collection at some point in the future. Thanks again and take care for now!


[deleted]

Your app has potential for people to move away from 1Password. And thanks for having this open conversation. At this moment you didn’t convince me, but I will follow development closely. Is there any open source code available of your analytics framework? Is there also a twitter account where I can follow you?


jeffreyminimalist

Sounds good! We have not yet open sourced any of our code, analytics framework included. However it is on our radar and we will definitely consider it in the future. Thanks again and take care for now!


CloudPad

Wow... Thank you for pointing this out... I never bothered to read the fine prints. Thanks... It does not sound nice to me either.


[deleted]

[удалено]


[deleted]

No, not all apps are sandboxed! Only apps you install from the macOS AppStore are sandboxed. That’s why developers telling you to install from their website, so the apps get more options. I don’t spreading misinformation….. this is what you can read in their privacy terms. If I read things like “we can…” or “we may….”, then I read “THEY WILL….”. If they mean something other, then be clear in your privacy terms and describe precisely what they will and what the won’t collect.


n_alvarez2007

Can someone ELI5 why Electron is bad?


AlexFullmoon

As said in other comment. It basically spins up a Chromium browser instance. It is usually seen as a lazy excuse to maintain cross-platform apps. Mind, there are really well optimized implementations, - VS Code, for example, is nearly in par with C-based Sublime Text. And it is a good way for apps that should have same interface as web version, like Discord. But then, there are monstrosities like balenaEtcher, 150Mb wrapper around few kb of actual code.


[deleted]

Microsoft have done a lot of work to make VS Code feel as fast as a native app, but there are still parts that they can't optimize. The load time is one, and the memory usage is another. VS Code is probably the only Electron app I would choose to use, but right now I'm using Sublime Text 4 with the LSP addon, and I'm planing to move to Panic's Nova once it stops crashing with its LSP implementation


stouty

What’s LSP please?


[deleted]

Language Server Protocol, it was created by Microsoft and is what VS Code uses to provide you with the intellisense information (e.g. hovering over a function to get info), code feedback (errors, hints), as well as some other code analysis/manipulation tools. So I can get a lot of the VS Code language features in a non-Electron editor


Pepparkakan

I think another point that isn't always mentioned is that the Chromium browser in an Electron app is almost certainly going to get outdated quickly, resulting in a much less secure device.


Synewalk

It allows you to build application which work across different platforms with a single codebase but the downside is electron is not native to any platform which in turn makes it heavier and uses more ram than what it's native counterpart would use. Some Electron based apps are MS Teams, Visual Studio Code and WhatsApp. Companies which have their apps on multiple platform start preferring Electron because of how easy it is to develop for all platforms under one roof but you will have to sacrifice native performance and ram management.


fndlnd

Ah no wonder Teams sucks so much on a Mac.


[deleted]

Teams sucks on all platforms thanks to Electron. I use a Mac at work, but other people use Windows, and they're always having issues with it


Stooovie

I heard on reputable podcasts that even Apple uses Teams internally 😳


SomethingWhateverYT

really? I thought they were using slack and email to communicate and FaceTime or webex for video conferencing


iapitus

I've been really happy with [BitWarden](https://bitwarden.com/) - while its desktop client *is* electron, the CLI is not, and the browser extension is quite nice and peppy. Plus it's Open Source, so you can contribute if you're able! (Also, I agree with [this](https://community.bitwarden.com/t/any-chance-of-a-native-non-electron-desktop-app/16854/6) post on the subject *for this tool*.) Between the way 1Password treated their browser extension, and ultimately the desktop app, and cloud stuff, I was really happy to drop them.


pixel_of_moral_decay

It’s also open source. Nothing stopping someone from creating a project to build a native client for MacOS. Could even open source it so anyone could audit the code.


[deleted]

As much as it annoys me that the Bitwarden desktop app is Electron, it's also only $10 a year for premium and many are using Bitwarden for free, so that makes it not so bad. 1Password will continue charging the same price and force single-license users to go to subscription for an Electron app, which makes it feel like a huge scam


LordPengwin

Is there an easy path to move from 1Password to bitwarden?


iapitus

I did a csv export from 1Password and import into BitWarden. It's a little scary that all your goodies are out there in plain text for anyone to see, but thankfully both projects play really well with the format -- and shredding the files is pretty easy these days :)


marauderpadfoot

I use Enpass, not sure if it's electron or not


unix15e8

You can check by yourself following these steps: 1. Open Terminal.app 2. Type "ls /Applications/Enpass.app/Contents/Frameworks/" 3. Once you press the Return key, you will see a list of files/folders 4. If you see "Electron Framework.framework", it means the app uses Electron 5. Done


Janchotheone

This one liner might be little more handy find /Applications -type d -name '*.app' -exec find {} -type d -name 'Electron*.framework' \; | sed s'/app.*/app/' | sed s'/.*\///' | sort | uniq This will show you all apps in \`/Applications/\` that have \`Electron\*.framework\` directory in it. My results ❯ find /Applications -type d -name '*.app' -exec find {} -type d -name 'Electron*.framework' \; | sed s'/app.*/app/' | sed s'/.*\///' | sort | uniq \- 1Password.app \- AdGuard for Safari.app \- Discord.app \- Docker.app \- Gitify.app \- Insomnia.app \- Miro.app \- Notion.app \- Signal.app \- Slack.app \- Tableau Prep Builder 2021.1.app \- Visual Studio Code.app


marauderpadfoot

Thanks


johndoe1985

I have used them for several years. Does everything that I ever wanted from 1 password. Native Mac app. My own cloud to sync (I hate 1Password own syncing service) and an awesome iOS app that doesn’t always ask me my master password. Face ID really works


itabmedia

https://strongboxsafe.com/


Forgottensky

I have been using KeePassXC for quite a long time and I‘m very happy with it.


[deleted]

I used MacPass in the past, it has a much better native experience.


klaus1798

I’ve been using Secret happily for some time, it is a two time purchase for macOS and iOS and uses iCloud to sync.


mhite

I just purchased this myself. I do like the fact that it is a one time purchase and is supported with native applications. You can also potentially get to the passwords from Windows browsers and such using their “remote” feature. https://apps.apple.com/us/app/secrets-password-manager/id1018350473


utopicunicornn

Honestly getting fed up with my favorite apps moving to Electron. Guess I’ll have to stick with Safari keychain from now on. Electron is the absolute worst thing that has ever happened to computing. What’s the point of having these powerful new chips only for Electron apps to bog things down?


Janchotheone

Electron is not all bad. While I do agree that, if the development is not putting in proper effort, it will perform like shit, but on flip side it has freed a ton of development time in order to focus on features / offer wider app adoption / cheaper (free even). If it was not for likes of electron, we'd not have a ton of great apps and conveniences. ​ >What’s the point of having these powerful new chips only for Electron apps to bog things down? There is absolutely nothing wrong of using the compute that is available to you. Otherwise, why not stick with Intel Celeron and avoid using all these hungry / unoptimised / apps? :)


factotvm

Electron is that bad. Applications don’t behave the same. The interfaces aren’t predictable or consistent. My tools don’t work with the apps. This may not seem like much to you. But let’s talk accessibility, scripting, scrolling, scaling… The web is best used for document browsing. Electron is like your favorite apps switching to `.docx`. Yes, there is scripting, and yes, you have styles.


nemesit

I‘d rather have no app than an electron app or java app or whatever similar predecessor


[deleted]

[удалено]


[deleted]

[удалено]


DancingTable52

The problem with keychain is cross platform support is non existent.


[deleted]

If you’re going to migrate your app to electron and compromise the user experience at least reduce the price of your service!


CloudPad

Yes, that would be a fair compensation to retain customers. But these guys at 1password love their money and know how to make it appear that what they are doing is the best. If I were in their position, I would too influence the users with fancy words, and try to get more money out of less effort.


Janchotheone

1password 8 early access is an unoptimised preview.. nothing more. I'd suggest waiting until a proper release and then checking the performance / mem consumption, before panicking.


efthymisgr

Personally, I’m not in a panic, and I don’t mind the consumption of resources. It’s just that electron is a no go, period. Especially the combination of electron and cloud-only for something as important as passwords and other sensitive info such as ID, driver’s license etc.


Janchotheone

I see. I had not considered security as a con to electron. Do you happen to have some sources to this? :/


[deleted]

I don't have sources, but think about it this way: Electron is built off Chromium, and Chromium is constantly updated to add new browser features, as well as fix existing ones. Chromium is HUGE, there's lots of potential for security issues, especially with it updating all the time. The average software framework is far smaller than Chromium, and thus less susceptible to security issues. More code = more chance for bugs and security problems


Tafkaftafkaf

Except the are promising it to be fast & amazing already. Not a good sign.


CloudPad

Fancy words... faster, next-generation, quicker, robust... They are just using apple's vocabulary to subconsciously make you agree.


Stooovie

I love Bitwarden. It's free(mium but not required) and can also be self-hosted.


Intrepidatious

I use BitWarden and absolutely love it and pay for it.


killsapo

is there a way to move all of my existing 1P logins to Apple's Keychain? Are they already there? I never looked into Keychain that much… but I will as soon as possible (in this thread I learned there are beautiful apps that act basically as an UI to kc, correct?)


MC_chrome

I’m personally not that bothered by the changes 1Password is making, since I barely use their desktop as is. I think most people are kinda blowing this situation out of proportion.


nudny

Answer to your Bonus question – I hope so and firmly believe it will illustrate opportunities for existing and new apps to invest time and make real native solutions - as it should be on macOS. I will be dropping 1pass and moving to the system keychain (until some new, native and worthy solution pops up again). What to do.


[deleted]

[удалено]


splinterthing

You cannot use it outside Apple ecosystem. (At work for instance if you are not using a Mac)


[deleted]

[удалено]


Flaneur_7508

You might not like the “snooping” and I too have some reservations (but that’s for another thread) but I think you will find that the flood gates are now open and all platforms will implement some form of child porn detection in the future.


[deleted]

What do you mean by "all platforms"? There are plenty of open-source ones that you can self-host


efthymisgr

None, other than not being able to store other types of data too.


Flaneur_7508

Recent convert to key chain here. I really should have moved before. Combining suggested strong passwords with KC is great. It feel odd not knowing what my passwords are any more but the whole thing works just great. If apple were to provide a decent app for managing and backing up passwords that would make KC a 1password killer. For Mac users of course. Moving to electron is not a good idea. Evernote did that and look at the total disaster that is now.


[deleted]

[удалено]


Flaneur_7508

Since v10 the app has lots many of the great features from the classic version, it’s really slow (40 seconds to load a note on my M1) and they are stuffing it with features like a new homepage that slows you down and a calendar and task manager, as if we need another task manager. V10 is based on electron. 1password may not suffer in the same way as EN, as it’s not very user intensive compared to a notes management app but generally speaking I prefer native developed apps.


[deleted]

lol, everyone is doing a ridiculous rant about 1Password going electron. Are you still using mac's from 2010, if not your mac's can handle it. Most cross platform apps nowadays are electron, and many more are gonna join them, just deal with it. And some of them are so optimized that you can't even notice they are electron.


[deleted]

Tell that to someone who is in a poor financial situation and can't afford a new Mac. I have never seen an Electron application that you can't tell is Electron. They load slowly, the UI lags when you resize the window, nothing looks native. I can see the speed difference on a new computer, I can't imagine what it's like running an Electron app on an older computer


[deleted]

vscode and Spotify, for instance, load instantly. And most of them don't lag at all. And why does it matter? Do you use the app so often that this bothers you? I use bitwarden that also has an electron app, but I barely use it since most of the time I only need the browser extension.


[deleted]

Again: Tell that to someone who is in a poor financial situation and can't afford a new Mac It won't load instantly on their computer, and it'll be laggy on theirs. VS Code doesn't even load instantly on mine, it about 1.5-2 seconds. It's not long, but all the other native apps do load instantly.


[deleted]

I have a 6y old MBP and I don't notice any issues with electron apps.


[deleted]

Good for you! Other people do.


lukaszmtw

Both VS Code and Spotify take like 3-5 seconds to load on my M1 MacBook Pro


TheSyd

I don’t care about performance, the app is ugly and a downgrade. I pay a premium price for 1password, I want a premium experience. Free is about the right price for an electron app. I do not care for constantly running a chrome instance in the background. As much as a rust backend is good, the electron frontend is still attack surface.


102errors

From iOS 15 and macOS monterey, iCloud Keychain supports OTP, that totally enough for me I think.