
I had been a user of 1Password for at least 12 years, but now I'm breaking up with them and have switched to Apple Keychain instead. So far, I have no regrets.
- 1Password 7 was the last version where the program was a product that you could buy. 1Password 8 requires that you pay them monthly rental. I find this business model despicably extractive, and I won't have my passwords held hostage that way.
- 1Password 8 can no longer use stand-alone or iCloud vaults, at all. You must store your passwords in their Clown service only.
- 1Password 7 on iOS is no longer receiving maintenance, and so it barely works any more. E.g., to log into a web site from iOS Safari, you have to unlock 1Password for it to fill in the user name, then immediately unlock it again to fill in the password, even if you have "auto lock after 5 minutes" selected. Then it is a crapshoot as to whether you'll have to unlock a third time to get your TOTP code.
- 1Password 8 on macOS is an "Electron" app, which means that it contains an entire embedded copy of Chrome, so that even if you choose not to run a web browser owned by the world's largest advertising company, your password manager remains bug compatible with the latest Chrome exploits such as the recent WebP bug.
Here's how I migrated:
- In macOS 1Password, select "Primary" vault;
- File / Export / All Items / iCloud Keychain CSV;
- System Settings / Passwords / "..." menu / Import.
If you have multiple vaults, do that for each of them.
This migrates all of the password data, including notes and TOTP seeds, but only for entries that have all of: a URL, a user name, and a password. If any of the three are missing, it won't import. It missed a bunch of them for me. It told me, "380 of 596 passwords were successfully imported", but it wouldn't tell me which ones are missing. All of my important ones seemed to be there, though, so I decided to just Leeroy Jenkins it. I suspect the missing ones were duplicate entries, since 1Password tends to accumulate those.
For non-website-password things (door codes, wifi passwords, etc.), the best solution appears to be to use Notes.app and create a locked note with those passwords in plain text. Locked notes are client-side encrypted before being stored in iCloud. If you haven't memorized it, you'll also want to save your Apple ID password in that secure note, because Apple Keychain won't ever auto-fill that one for you.
To get 1Password out of your face:
- On macOS: "File / Quit 1Password Entirely" and remove it from "General / Login Items".
- On both macOS and iOS: disable the 1Password extension ("Safari / Settings / Extensions"). This prevents the "Unlock 1Password" dialog from popping up when you click on a login field in desktop Safari;
- On iOS: Settings / Passwords / Password Options / Un-check 1Password. This removes it from the password suggestion list.
Weirdness I have noticed:
- On macOS, sometimes Safari won't auto-fill my billing address on forms.
-
On iOS, the "password suggestion" list still has 1Password listed as the top suggestion. I didn't want to delete the app in case something didn't get exported properly, but apparently you have to do that to get its hooks out of Safari. (Fixed by item 3 above.)
If you had been using 1Password shared vaults, I do not know what a good non-1Password-based solution for that is. Likewise, if you need to share passwords with non-Apple devices, I don't have answers for that.
Please note: If you have come here to recommend a different password manager, I implore you to not do that, as I just do not care. This is what I did. If something else works for you, good for you. Write it up on your own blog.
Previously, previously.