@rmondello I signed up for a year of NordPass and then was immediately blocked from using with work machines due to security policy. NO VPNs. Which is enforced by blocking the authentication websites for VPN services. NordVPN uses the same authentication site for NordPass so blocked. I was advised to use s service that did not offer a VPN service as well 🤦‍♂️🤦‍♂️

@rmondello Talking about features, also of other PW managers: 1. There’s an iOS feature that forces FaceID or TouchID for some access on stolen devices, disabling the device code. Does this extend to the Apple Passwords app? 2. Any chance of getting attachments on a list of possible features? That’s the one reason I use an extra local non-synced keepass db for some secret information.

@rmondello

Thank you for this!

I was delaying and thinking too hard about how to transfer.

I had no idea. But this really did make it easy and indeed covered passkeys too.

Thanks as well for your work making this possible and for sharing your thoughts. Technology, just as society, isn’t morally neutral, agree. (Hence, why I’m interested in this.)

@rmondello this is wonderful; thank you!

I have started the migration away from 1Password to Apple Password. This should fine in the interim.

The two things that isI don’t necessary like are that, 1.) the idea of the password manager updates tied to OS updates; to me that is a coupling that does not make sense. And 2.) Apple Password is bad at cross browser (Safari is not my primary browser) and platform interoperability.

Again, not really a deal breaker in the short term; but more than likely I will be looking at another migration to something that works better cross platform and cross browser.

@rmondello Oh hey I didn't know you were responsible for breaking CXF into its own proposal. Neat.

@rmondello Thanks for the write-up and for taking such a clear ethical stance.

@rmondello This is great! Any possibility of an Apple Passwords app on Linux?

@rmondello out of curiosity (this wouldn't actually benefit me), are there plans for a web client for linux/chromeos like google's password manager has?

@rmondello
> Your credentials are yours to take and manage. [...] We just needed to figure out how to enable that in a phishing-resistant way. [...] I’m talking about manually exporting an unencrypted file and [...] that was going to be a non-starter for passkeys because a threat actor could trick someone into exporting their data and then uploading it to them. That’s called phishing.

So, they're _NOT_ mine to take and manage? I do understand the need for the general population to have these bulletproof anti-foot-gun mechanisms, but, and I don't like having to export to an unencrypted file, but the point about being locked in & controlled by your password manager is still valid because, I don't think 1P or Apple Passwords will give me my passkeys outside of an Apple Approved transfer. If I, a sufficiently savvy user device that, I do in fact want to upload my passkeys to a sketchy website, that should be my own mistake. Computer should not say no.

@rmondello I was not aware of the secure transfer on iOS. That makes it easy for me switch to Apple Passwords once the 27 OSes are out (still running 15 on my Mac which misses new features there I need)

@rmondello I don't personally need this, but I think a great addition to Apple Passwords (which I love) would be apps for Android and Linux. Let the powers that be know. :)

@rmondello how to copy old passkeys from Apple Keychain to other Pw App?

@rmondello I ended up, after lots of testing of various alternatives, on Strongbox (Apple friendly front-end for Keepass).

@rmondello I appreciate your work inside and out of Apple!