• Re: Password managers - has Apple's got better?

    From Joerg Lorenz@21:1/5 to All on Sat Apr 22 15:40:27 2023
    Am 22.04.23 um 15:20 schrieb Andy Hewitt:
    Now, the only thing I'm missing is the other data I accessed sometimes,
    such as banking and personal ID stuff (like driving licence number etc.).

    I built an encrypted database for all my logins and passwords even for
    my credit card, banking and other non-internet accesses. I use a Libre
    Office Calc Spreadsheet for this.

    My wife requested me to do that for hers as well.

    I need it that way because I use a lot of Open Source software and Linux
    in addition to my leading Macs.

    Perhaps that could be a solution for you.


    --
    De gustibus non est disputandum

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to All on Sat Apr 22 14:20:54 2023
    I've been messing about with my features, as usual, and although I've
    liked using BitWarden as a password manager, I personally prefer a more simplified workflow.

    So I decided to have a look into the new features in Keychain/Apple
    Passwords, such as the Authenticator.

    That's kind of been a revelation to me. I was using Authy, but found it
    to be cumbersome to use, having to switch back and forth between apps to
    obtain and enter codes.

    The built in one, at first, seemed to not be clear how it worked.
    Perhaps because I was overthinking it. It's almost too simple, and just
    works with a click once setup.

    I've also noticed that in recent times, that it's also become much more reliable than others I've used. I quite often had to go back into
    BitWarden and manually hunt out the password history and paste into
    updated or new logins (or enter the username manually). Enpass before
    that was similar.

    As most of my usage is now on the iPad Pro, and i-devices in general,
    I'm tending to mostly use Apple stuff for most tasks - Safari, Mail,
    Photos and all iCloud stuff. Mainly because I prefer the more seamless integration I experience this way, so the built in Keychain is actually
    all I need for 99% of my login things.

    Now, the only thing I'm missing is the other data I accessed sometimes,
    such as banking and personal ID stuff (like driving licence number etc.).

    Any suggestions for that? Use the hidden notes box in each password
    item, make secure Notes, or maybe just keep BitWarden for those things?

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From David Kennedy@21:1/5 to Andy Hewitt on Sat Apr 22 18:47:02 2023
    On 22/04/2023 14:20, Andy Hewitt wrote:
    I've been messing about with my features, as usual, and although I've liked using BitWarden as a password manager, I personally prefer a more simplified workflow.

    So I decided to have a look into the new features in Keychain/Apple Passwords,
    such as the Authenticator.

    That's kind of been a revelation to me. I was using Authy, but found it to be cumbersome to use, having to switch back and forth between apps to obtain and enter codes.

    The built in one, at first, seemed to not be clear how it worked. Perhaps because I was overthinking it. It's almost too simple, and just works with a click once setup.

    I've also noticed that in recent times, that it's also become much more reliable than others I've used. I quite often had to go back into BitWarden and manually hunt out the password history and paste into updated or new logins (or enter the username manually). Enpass before that was similar.

    As most of my usage is now on the iPad Pro, and i-devices in general, I'm tending to mostly use Apple stuff for most tasks - Safari, Mail, Photos and all iCloud stuff. Mainly because I prefer the more seamless integration I experience this way, so the built in Keychain is actually all I need for 99% of my login things.

    Now, the only thing I'm missing is the other data I accessed sometimes, such as banking and personal ID stuff (like driving licence number etc.).

    Any suggestions for that? Use the hidden notes box in each password item, make
    secure Notes, or maybe just keep BitWarden for those things?

    Well I changed back to it last year and so far no complaints.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to Joerg Lorenz on Sun Apr 23 08:12:32 2023
    On 22/04/2023 14:40, Joerg Lorenz wrote:
    Am 22.04.23 um 15:20 schrieb Andy Hewitt:
    Now, the only thing I'm missing is the other data I accessed sometimes,
    such as banking and personal ID stuff (like driving licence number etc.).

    I built an encrypted database for all my logins and passwords even for
    my credit card, banking and other non-internet accesses. I use a Libre
    Office Calc Spreadsheet for this.

    My wife requested me to do that for hers as well.

    I need it that way because I use a lot of Open Source software and Linux
    in addition to my leading Macs.

    Perhaps that could be a solution for you.

    Actually, that was a good idea. I re-exported the BitWarden database,
    and imported into Numbers, edited it to only contain the data I needed,
    and then saved it with a lock password.

    That saved to the main KeyChain, and now it opens on my i-devices using
    FaceID. Nice one.

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin S Taylor@21:1/5 to Andy Hewitt on Sun Apr 23 10:28:12 2023
    On 22 Apr 2023, Andy Hewitt wrote
    (in article <u20mvm$39hk9$1@dont-email.me>):

    So I decided to have a look into the new features in Keychain/Apple Passwords, such as the Authenticator.

    What are these, then? Are we just talking about iPhone and iPad, or are they
    on MacOS as well?

    MST

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to Martin S Taylor on Sun Apr 23 19:40:58 2023
    On 23/04/2023 10:28, Martin S Taylor wrote:
    On 22 Apr 2023, Andy Hewitt wrote
    (in article <u20mvm$39hk9$1@dont-email.me>):

    So I decided to have a look into the new features in Keychain/Apple
    Passwords, such as the Authenticator.

    What are these, then? Are we just talking about iPhone and iPad, or are they on MacOS as well?

    Seems to work on all devices here - at least I can see a 6 digit
    authenticator code appearing in my saved Passwords here on my old iMac.
    No idea if that works as a clickable item on the Mac yet, but it's OK on
    my iPhone and iPad so far.

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Ian McCall@21:1/5 to Andy Hewitt on Mon Apr 24 10:22:49 2023
    On 22 Apr 2023, Andy Hewitt wrote
    (in article <u20mvm$39hk9$1@dont-email.me>):

    ...As most of my usage is now on the iPad Pro, and i-devices in general,
    I'm tending to mostly use Apple stuff for most tasks - Safari, Mail,
    Photos and all iCloud stuff. Mainly because I prefer the more seamless integration I experience this way, so the built in Keychain is actually
    all I need for 99% of my login things.

    Now, the only thing I'm missing is the other data I accessed sometimes,
    such as banking and personal ID stuff (like driving licence number etc.).

    Any suggestions for that? Use the hidden notes box in each password
    item, make secure Notes, or maybe just keep BitWarden for those things?

    Honestly I’m still on 1Password mostly because there’s no good client software for the Apple password stuff. I’d move over if could, but
    1Password has the client side down pat.

    The extra fields you’re talking about, the organisation where you can add extra sections (and extra URLs where the password is valid, useful for the .com/.co.uk-type situations amongst others), categorisation, the fact that
    the Mac KeyChain is filled with inscrutable system stuff...all of it points
    to me still using a separate client for this.

    I’d like to move over, but honestly right now I just don’t feel the UI
    side of it is normal user-friendly.

    Cheers,
    Ian

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to Ian McCall on Mon Apr 24 10:39:34 2023
    On 24/04/2023 10:22, Ian McCall wrote:
    On 22 Apr 2023, Andy Hewitt wrote
    (in article <u20mvm$39hk9$1@dont-email.me>):

    ...As most of my usage is now on the iPad Pro, and i-devices in general,
    I'm tending to mostly use Apple stuff for most tasks - Safari, Mail,
    Photos and all iCloud stuff. Mainly because I prefer the more seamless
    integration I experience this way, so the built in Keychain is actually
    all I need for 99% of my login things.

    Now, the only thing I'm missing is the other data I accessed sometimes,
    such as banking and personal ID stuff (like driving licence number etc.).

    Any suggestions for that? Use the hidden notes box in each password
    item, make secure Notes, or maybe just keep BitWarden for those things?

    Honestly I’m still on 1Password mostly because there’s no good client software for the Apple password stuff. I’d move over if could, but 1Password has the client side down pat.

    The extra fields you’re talking about, the organisation where you can add extra sections (and extra URLs where the password is valid, useful for the .com/.co.uk-type situations amongst others), categorisation, the fact that the Mac KeyChain is filled with inscrutable system stuff...all of it points to me still using a separate client for this.

    I’d like to move over, but honestly right now I just don’t feel the UI side of it is normal user-friendly.

    I dropped 1Password a few years ago, once they started pushing the
    subscription model too much. It was just too expensive for my taste at
    the time.

    I did spend a short while using Enpass, but they also moved on to the subscription model.

    A couple of years ago I switched to BitWarden, which I actually have
    paid the subscription for, but at $10/year I find that very palatable.

    In all cases though, I found it very hit and miss whether they would
    reliably work with all website logins. Sometimes not picking up a new
    user registration details, sometimes not filling in all of the boxes
    (often missing the username box), and often not filling in automatically
    when returning to a site to log back in.

    Of the lot, I have found the built in Keychain system has been the most reliable for all of that. Which is one of the reasons I wanted to switch
    back to just using it.

    Certainly for just website logins it does what's needed there. I
    recently added 'Shortcut' that allows it to be accessed with a single
    click on my iDevices, and behave a bit more like an 'App'.

    The bit missing is the cloud syncing of secure notes that's included in
    the Desktop Keychain, which does do what I want that far, but doesn't
    seem to be accessible from iDevices. So is almost there, but no banana.

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From TimH@21:1/5 to All on Mon Apr 24 11:25:52 2023
    On 24 Apr 2023 at 10:39:34 am BST, "Andy Hewitt" <thewildrover@icloud.com> wrote:

    A couple of years ago I switched to BitWarden, which I actually have
    paid the subscription for, but at $10/year I find that very palatable.

    In all cases though, I found it very hit and miss whether they would
    reliably work with all website logins. Sometimes not picking up a new
    user registration details, sometimes not filling in all of the boxes
    (often missing the username box), and often not filling in automatically
    when returning to a site to log back in.

    I'm finding (anecdote not data) that BitWarden seems much improved in the last few months. I'm rarely having to do the password history hunt. I haven't checked on the forums to see if my impression correlates with any actual changes.

    Also the cmd-shift-L shortcut to fill in forms (don't actually know how long that's existed) has improved the quality of life!
    --
    TimH
    pull tooth to reply by email

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From nospam@21:1/5 to thewildrover@icloud.com on Mon Apr 24 09:13:43 2023
    In article <u25iom$9k5i$1@dont-email.me>, Andy Hewitt
    <thewildrover@icloud.com> wrote:

    I dropped 1Password a few years ago, once they started pushing the subscription model too much. It was just too expensive for my taste at
    the time.

    the old non-subscription version still works.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to TimH on Mon Apr 24 16:28:23 2023
    On 24/04/2023 12:25, TimH wrote:
    On 24 Apr 2023 at 10:39:34 am BST, "Andy Hewitt" <thewildrover@icloud.com> wrote:

    A couple of years ago I switched to BitWarden, which I actually have
    paid the subscription for, but at $10/year I find that very palatable.

    In all cases though, I found it very hit and miss whether they would
    reliably work with all website logins. Sometimes not picking up a new
    user registration details, sometimes not filling in all of the boxes
    (often missing the username box), and often not filling in automatically
    when returning to a site to log back in.

    I'm finding (anecdote not data) that BitWarden seems much improved in the last
    few months. I'm rarely having to do the password history hunt. I haven't checked on the forums to see if my impression correlates with any actual changes.

    Also the cmd-shift-L shortcut to fill in forms (don't actually know how long that's existed) has improved the quality of life!

    Well, yes, my comments are also anecdotal too, and only apply to my own experience with each app.

    Of course they may all have changed, updated and 'improved' over time,
    but it's not one of those things that's easy to keep switching about to
    try out new systems (especially once you build up a good set of logins).

    I've usually kept the Apple KeyChain running in parallel, so it's not
    all that hard to switch to at this time. Indeed, it's done a much better
    job of importing my BitWarden datafile than I was expecting. It imported
    it, without creating a mass of messy duplicates, and most of it is ready
    to use (I had to do a lot of cleaning and weeding when I switched to BitWarden).


    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to nospam on Mon Apr 24 16:29:17 2023
    On 24/04/2023 14:13, nospam wrote:
    In article <u25iom$9k5i$1@dont-email.me>, Andy Hewitt <thewildrover@icloud.com> wrote:

    I dropped 1Password a few years ago, once they started pushing the
    subscription model too much. It was just too expensive for my taste at
    the time.

    the old non-subscription version still works.

    That wasn't entirely the point though.

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From David Kennedy@21:1/5 to Andy Hewitt on Tue Apr 25 07:35:15 2023
    On 24/04/2023 10:39, Andy Hewitt wrote:
    Of the lot, I have found the built in Keychain system has been the most reliable for all of that. Which is one of the reasons I wanted to switch back to just using it.

    Certainly for just website logins it does what's needed there. I recently added 'Shortcut' that allows it to be accessed with a single click on my iDevices, and behave a bit more like an 'App'.

    It mostly does what it says on the tin.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From David Kennedy@21:1/5 to RJH on Tue Apr 25 11:42:28 2023
    On 25/04/2023 11:28, RJH wrote:
    On 25 Apr 2023 at 07:35:15 BST, David Kennedy wrote:

    On 24/04/2023 10:39, Andy Hewitt wrote:
    Of the lot, I have found the built in Keychain system has been the most
    reliable for all of that. Which is one of the reasons I wanted to switch back
    to just using it.

    Certainly for just website logins it does what's needed there. I recently >>> added 'Shortcut' that allows it to be accessed with a single click on my >>> iDevices, and behave a bit more like an 'App'.

    It mostly does what it says on the tin.

    I've been using Keychain for the past couple of years and it's been solid, working well between Apple devices.

    I do however feel I'm lulling myself into a false sense of security by using Apple logins and secure passwords. Come the day (and that day will come) when it stops working I'll be stuffed . . .

    Prompted by this thread I just tried exporting Keychain logins - doesn't seem to work - the 'Export' option is greyed out.

    going to Keychain Help produces -

    "
    Import and export keychain items using Keychain Access on Mac

    You can export some keychain items (for example, certificates and keys) from one computer and then import them into Keychain Access on another.

    Note: You can’t export passwords from Keychain Access."

    So, no way to export everything however I suspect that they feel that as it's backed up in the Cloud then there is no need.

    [I'm sure that it's not just to stop you using another method/product...]

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to RJH on Tue Apr 25 11:56:58 2023
    On 25/04/2023 11:28, RJH wrote:
    On 25 Apr 2023 at 07:35:15 BST, David Kennedy wrote:

    On 24/04/2023 10:39, Andy Hewitt wrote:
    Of the lot, I have found the built in Keychain system has been the most
    reliable for all of that. Which is one of the reasons I wanted to switch back
    to just using it.

    Certainly for just website logins it does what's needed there. I recently >>> added 'Shortcut' that allows it to be accessed with a single click on my >>> iDevices, and behave a bit more like an 'App'.

    It mostly does what it says on the tin.

    I've been using Keychain for the past couple of years and it's been solid, working well between Apple devices.

    I do however feel I'm lulling myself into a false sense of security by using Apple logins and secure passwords. Come the day (and that day will come) when it stops working I'll be stuffed . . .

    Prompted by this thread I just tried exporting Keychain logins - doesn't seem to work - the 'Export' option is greyed out.

    In Ventura, you can export login passwords using the
    Preferences/Passwords panel, click the three dots next to the search box
    (also greyed out in the Keychain app here, so I guess they've moved the functionality across).

    No idea on iDevices though, such options don't even seem available at all.

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From RJH@21:1/5 to David Kennedy on Tue Apr 25 10:28:37 2023
    On 25 Apr 2023 at 07:35:15 BST, David Kennedy wrote:

    On 24/04/2023 10:39, Andy Hewitt wrote:
    Of the lot, I have found the built in Keychain system has been the most
    reliable for all of that. Which is one of the reasons I wanted to switch back
    to just using it.

    Certainly for just website logins it does what's needed there. I recently
    added 'Shortcut' that allows it to be accessed with a single click on my
    iDevices, and behave a bit more like an 'App'.

    It mostly does what it says on the tin.

    I've been using Keychain for the past couple of years and it's been solid, working well between Apple devices.

    I do however feel I'm lulling myself into a false sense of security by using Apple logins and secure passwords. Come the day (and that day will come) when it stops working I'll be stuffed . . .

    Prompted by this thread I just tried exporting Keychain logins - doesn't seem to work - the 'Export' option is greyed out.
    --
    Cheers, Rob, Sheffield UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From RJH@21:1/5 to Andy Hewitt on Tue Apr 25 11:05:56 2023
    On 25 Apr 2023 at 11:56:58 BST, Andy Hewitt wrote:

    On 25/04/2023 11:28, RJH wrote:
    On 25 Apr 2023 at 07:35:15 BST, David Kennedy wrote:

    On 24/04/2023 10:39, Andy Hewitt wrote:
    Of the lot, I have found the built in Keychain system has been the most >>>> reliable for all of that. Which is one of the reasons I wanted to switch back
    to just using it.

    Certainly for just website logins it does what's needed there. I recently >>>> added 'Shortcut' that allows it to be accessed with a single click on my >>>> iDevices, and behave a bit more like an 'App'.

    It mostly does what it says on the tin.

    I've been using Keychain for the past couple of years and it's been solid, >> working well between Apple devices.

    I do however feel I'm lulling myself into a false sense of security by using >> Apple logins and secure passwords. Come the day (and that day will come) when
    it stops working I'll be stuffed . . .

    Prompted by this thread I just tried exporting Keychain logins - doesn't seem
    to work - the 'Export' option is greyed out.

    In Ventura, you can export login passwords using the
    Preferences/Passwords panel, click the three dots next to the search box (also greyed out in the Keychain app here, so I guess they've moved the functionality across).


    Many thanks - that's diabolically simple!

    No idea on iDevices though, such options don't even seem available at all.


    --
    Cheers, Rob, Sheffield UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andy Hewitt@21:1/5 to RJH on Tue Apr 25 15:12:20 2023
    On 25/04/2023 12:05, RJH wrote:
    On 25 Apr 2023 at 11:56:58 BST, Andy Hewitt wrote:

    On 25/04/2023 11:28, RJH wrote:
    On 25 Apr 2023 at 07:35:15 BST, David Kennedy wrote:

    On 24/04/2023 10:39, Andy Hewitt wrote:
    Of the lot, I have found the built in Keychain system has been the most >>>>> reliable for all of that. Which is one of the reasons I wanted to switch back
    to just using it.

    Certainly for just website logins it does what's needed there. I recently >>>>> added 'Shortcut' that allows it to be accessed with a single click on my >>>>> iDevices, and behave a bit more like an 'App'.

    It mostly does what it says on the tin.

    I've been using Keychain for the past couple of years and it's been solid, >>> working well between Apple devices.

    I do however feel I'm lulling myself into a false sense of security by using
    Apple logins and secure passwords. Come the day (and that day will come) when
    it stops working I'll be stuffed . . .

    Prompted by this thread I just tried exporting Keychain logins - doesn't seem
    to work - the 'Export' option is greyed out.

    In Ventura, you can export login passwords using the
    Preferences/Passwords panel, click the three dots next to the search box
    (also greyed out in the Keychain app here, so I guess they've moved the
    functionality across).


    Many thanks - that's diabolically simple!

    Isn't it.

    I found this now too:

    https://www.idownloadblog.com/2020/02/14/import-export-icloud-keychain-passwords/

    Specifically it says:

    'Important note: Starting with macOS Big Sur and later, you can’t export passwords from Mac’s Keychain Access app, but only export certain saved certificates and keys.

    Keep in mind that not all passwords will be available for export. So as
    you go through this process, if the Export feature is grayed out, then
    one or more of your selected items cannot be exported.'

    You can also export from Safari.

    --
    Andy H

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Alan B@21:1/5 to Andy Hewitt on Tue Apr 25 14:27:55 2023
    Andy Hewitt <thewildrover@icloud.com> wrote:

    [snip]

    https://www.idownloadblog.com/2020/02/14/import-export-icloud-keychain-passwords/

    Specifically it says:

    'Important note: Starting with macOS Big Sur and later, you can’t export passwords from Mac’s Keychain Access app, but only export certain saved certificates and keys.

    Keep in mind that not all passwords will be available for export. So as
    you go through this process, if the Export feature is grayed out, then
    one or more of your selected items cannot be exported.'

    You can also export from Safari.

    And then import them into other browsers such as Firefox as I recently discovered. (It’s probably been available for years though!!!)

    --
    Cheers, Alan

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)