Keychain itself is getting better and more fleshed out UX, but it’s still not flexible enough to trust for everything unfortunately.
If an app is Electron, it gets an extra and fairly rigorous level of "do I need it? What are the alternatives?" treatment, for this reason. Native, or even QT, doesn't get that kind of in-advance scrutiny, since only rarely do they cause any problems, even if I forget about them and leave them on in the background for months.
You may wish to look into Secrets: https://outercorner.com/secrets-mac/
It appears to check all the boxes that 1Password used to check.
I wasn’t actively looking to find a replacement, but I was certainly not happy to see them taking venture funding. That’s great in some contexts, but explicit pressure to grow revenue enough to support 500 people and pay back a bunch of venture capitalists isn’t very conducive to writing quality software.
> maybe a lone develop that doesn’t need perpetual growth, will make a good, standalone, native Mac password manager.
How do you trust this lone developer? Password manager is all about security and having a motivation to chase money has more trust than someone seemingly doing it voluntarily.
And electron app, not sure why people still complain in 2021... unless you're machine is still running with 2GB memory...
Usability is so much more important than using extra 300MB of memory being electron.
I don't know if it's more important, but certainly, Electron apps' poor usability is another reason to avoid them.
While there are exceptions, they tend to lack usable right-click menus, use odd font sizes (everything's too big), have UI elements that behave differently from the platform standard, and, of course, lag, all of which make usability suffer.
Separately, Electron is itself a large piece of code and integrating it would increase the attack surface — of a piece of security code! Another good reason to switch if this comes to pass.
At the same time, the most audited code it there. Maybe you don't use a GUI browser.
And even then it looks like the JS is WASM compiled from rust.
It’s not implemented in JavaScript/typescript is what I mean. As such it seems to be lean on my system.
% tar ztf 1password-latest.tar.gz | grep "chrome"
1password-8.1.1.x64/chrome-sandbox
1password-8.1.1.x64/chrome_100_percent.pak
1password-8.1.1.x64/chrome_200_percent.pakEDIT: 168MiB resident memory on my system (just checked).
Though it malloc'd (but never used) 32G, that's worrying.
https://dteare.medium.com/behind-the-scenes-of-1password-for...
Does anyone know if 1Password 8 on macOS will also be an Electron app? Their Linux Electron app is pretty good and definitely much better than having no 1Password at all. However, this would be a sad ending for what started out as a great, efficient, native Mac-only application.
I can understand why AgileBits would make this choice. For most users, Electron is probably not a big issue, if they'd notice at all. But as someone who loves native macOS apps, it just makes me sad.