News for hackers. Stuff that matters.
Re:Tell HN: 1Password shares passwords you don't want shared by seanosaur on Thursday February 17, 2022 @09:54AM (#30373667)
You're right that you can't change the default vault for Generate Password but you _can_ set the default in the Preferences pane. My default, for instance, is my private vault. Anything I create goes there and if it warrants sharing to other vaults, I do that manually.
Re:Tell HN: 1Password shares passwords you don't want shared by drcongo on Thursday February 17, 2022 @09:58AM (#30373716)
Upvoting because you're correct, changing this does change the save location, so thanks. Seems mad that it defaults to the shared vault though.
Re:Tell HN: 1Password shares passwords you don't want shared by roustem on Thursday February 17, 2022 @11:36AM (#30375049)
It has to be a private vault by default, unless we have a bug in 1Password 7. There were years of internal discussions about how and where the new items should be saved.

When it comes to generated passwords, we had this implementations since 1Passwd 1.0 and it was always a bit kludgey. I believe the redesign in 1Password 8 completely solves this problem by using a special system vault to store the generated values.

-- Roustem 1Password Founder

Re:Tell HN: 1Password shares passwords you don't want shared by sleepybrett on Thursday February 17, 2022 @12:14PM (#30375701)
Unfortunately you alienated a significant portion of your userbase who will not be moving to 8. That said, because my breakpoint was 'i don't trust your fucking cloud with my passwords and i won't be forced to use it', this particular bug does not affect me.
Re:Tell HN: 1Password shares passwords you don't want shared by drcongo on Thursday February 17, 2022 @12:19PM (#30375803)
I'm stuck with 1Password because the alternatives, if they meet our company requirements, are so much worse. But the web app is unusably slow and every release is worse than the last - eventually I expect 1Password to sink to being even worse than the competition.
Re:Tell HN: 1Password shares passwords you don't want shared by nvr219 on Thursday February 17, 2022 @01:33PM (#30376781)
Rude.
Re:Tell HN: 1Password shares passwords you don't want shared by coldtea on Thursday February 17, 2022 @05:48PM (#30379759)
But also true for many.
Re:Tell HN: 1Password shares passwords you don't want shared by throwaway894345 on Thursday February 17, 2022 @10:13AM (#30373902)
Mine defaulted to private vault, which is a little frustrating because I'd like it to share everything by default (only other person on my account is my wife). Glad to hear it can be changed.
Re:Tell HN: 1Password shares passwords you don't want shared by robbedpeter on Thursday February 17, 2022 @11:26AM (#30374870)
It'd be worthwhile to create a fresh account and screenshot the defaults. Maybe you set your default manually at some point and weren't aware, or there's an easy way to slip up?

Nice catch, though!

Re:Tell HN: 1Password shares passwords you don't want shared by jb1991 on Thursday February 17, 2022 @12:26PM (#30375927)
I just checked, running the latest version, which I just signed up for, and the default vault is Private. I have never touched that setting and it was always set to Private. So either the behavior has changed or it is incorrect that it ever defaulted to Shared (which wouldn't make any sense whatsoever for a company this focused on privacy).
Re:Tell HN: 1Password shares passwords you don't want shared by drcongo on Thursday February 17, 2022 @02:24PM (#30377430)
That's not at all what's described in the OP.

> If you have shared and private vaults on 1Password

Re:Tell HN: 1Password shares passwords you don't want shared by jb1991 on Friday February 18, 2022 @04:54AM (#30383904)
That’s right, I have a shared and private vault on 1Password. The default is the private vault, not the shared vault. Appears a few sibling replies are noting a similar understanding, so I’m not sure where the confusion is.
Re:Tell HN: 1Password shares passwords you don't want shared by wanderer_ on Thursday February 17, 2022 @11:00AM (#30374499)
I use 1password, and I have always had a mild distaste for its 'vaults' UX. I live with it though, and since I'm only creating logins every once in a while I just leave it be, and shake my head every time do use it. On the whole, the service could be better, but for the price it's not too bad :)
Re:Tell HN: 1Password shares passwords you don't want shared by manicdee on Thursday February 17, 2022 @05:41PM (#30379698)
The multiple vaults are extremely useful to me since I only have to sync my work passwords with my work computer, not my entire password collection. There’s no reason for my HN, Reddit, TeslaFi or PlugShare account details to be on the work computer regardless how supposedly secure 1Password might be (I don’t own the hardware and I know it has surveillance software installed).
Re:Tell HN: 1Password shares passwords you don't want shared by wanderer_ on Tuesday February 22, 2022 @05:48PM (#30434977)
Tangentially, I seem to recall recently (2020 sometime) where someone made custom firmware for a laptop's wifi card that, since the computer was set up with a central hub for most of its peripherals, could sniff data flowing from things like USB stuff and, more interestingly, its keyboard.

It ended up as an extremely elegant keylogger. Cool stuff.

Re:Tell HN: 1Password shares passwords you don't want shared by PikachuEXE on Thursday February 17, 2022 @08:40PM (#30381189)
I am using 1PW on iOS (1PW latest) & Windows (1PW 8) & Mac (1PW 7)

I have shared and private vault (the default Private + other new shared)

I have checked on Windows & MacOS again and I remember that option has always been set to the default private vault.

Re:Tell HN: 1Password shares passwords you don't want shared by e40 on Thursday February 17, 2022 @11:57AM (#30375415)
I have it running on many computers and have never seen it default to a shared vault.
Re:Tell HN: 1Password shares passwords you don't want shared by Nextgrid on Thursday February 17, 2022 @10:10AM (#30373866)
It presumably defaults to whatever first vault that code path sees, so because of a race condition the shared vault could appear before the private one and thus becomes the default.
Re:Tell HN: 1Password shares passwords you don't want shared by fragmede on Thursday February 17, 2022 @12:11PM (#30375655)
The people you are sharing vaults with a going to be trusted people. Where tus factor for and individual's life is going to be low, having passwords shared, whether they're for Netflix or bitcoin private keys and such is simply more convenient and in some cases, desirable, eg a married couple with finances mingled together.
Re:Tell HN: 1Password shares passwords you don't want shared by drcongo on Thursday February 17, 2022 @12:16PM (#30375756)
One of that married couple might not want their Tinder password popping up in the shared vault.
Re:Tell HN: 1Password shares passwords you don't want shared by sundaeofshock on Thursday February 17, 2022 @10:01AM (#30373764)
if I’m not mistaken, the default setting is to save it to your private vault. This doesn’t sound like a bug, but rather an error in user behavior.
Re:Tell HN: 1Password shares passwords you don't want shared by drcongo on Thursday February 17, 2022 @10:07AM (#30373830)
I'd never change that setting, so mine definitely defaulted to the shared vault. There could be any number of possible reasons it set that as the default, but my guess would be the order I migrated vaults over from the good old days where we could choose how we shared and synced. The fact that it is even possible still seems like a bug to me.
Re:Tell HN: 1Password shares passwords you don't want shared by concinds on Thursday February 17, 2022 @10:44AM (#30374277)
I'm absolutely glad that the Shared vault can be set as the default one; it's great to be able to troubleshoot family members, check if 2FA is on, etc. without having to visit them in person and use their laptop.

Doesn't seem like a bug at all, and in fact I would likely switch to iCloud Keychain if this behavior went away (which doesn't support default-shared but is free).

There seem to be 2 problems here: Generate Password not telling you which vault it will be saved in, and the Shared vault being set as default (presumably) without user input.

Re:Tell HN: 1Password shares passwords you don't want shared by lupire on Thursday February 17, 2022 @10:52AM (#30374391)
It warrants extra care -- every time you save a password to Shared, it should give an explicit visible warning.
Re:Tell HN: 1Password shares passwords you don't want shared by the_arun on Thursday February 17, 2022 @11:49AM (#30375275)
In a tool like 1Password, they need to do enough to avoid user errors (I'm sure they are). That is the responsibility of these tools. In other words - there is no such thing as user errors for these tools.
Re:Tell HN: 1Password shares passwords you don't want shared by weisnobody on Thursday February 17, 2022 @01:44PM (#30376928)
I have different experience with v 7.

Vault for Saving in preferences is set to Primary.

If I select a specific vault to view in 1 password, then end up on a website and create a password, 1Password mini has the viewed vault as selected when it asks to save the password, not the vault I've specified as where to save new passwords.

This has been long standing behavior in 1 Password.

Still on 7 because I'm using a mix of vault locations and while I'm using both teams and personal 1password, I have other vaults in other locations.