@rmondello Thank you for publishing this. I will probably use it soon.

As I emailed 1Password, I’m giving it another week, then switching over to Apple Passwords. Would rather not patronize a business that gives DHH money.

@rmondello I've mostly switched over from 1password 7 installs, just some secure notes/text fields didn't seem to make it over from whatever export file format I outputted from 1password

Now I just have to sit down and either use iCloud for windows for my windows firefox usage at work, or maybe figure out a way to regularly sync the work entries from Apple Passwords to Firefox's password manager....

@rmondello I signed up for a year of NordPass and then was immediately blocked from using with work machines due to security policy. NO VPNs. Which is enforced by blocking the authentication websites for VPN services. NordVPN uses the same authentication site for NordPass so blocked. I was advised to use s service that did not offer a VPN service as well 🤦‍♂️🤦‍♂️

@rmondello Talking about features, also of other PW managers: 1. There’s an iOS feature that forces FaceID or TouchID for some access on stolen devices, disabling the device code. Does this extend to the Apple Passwords app? 2. Any chance of getting attachments on a list of possible features? That’s the one reason I use an extra local non-synced keepass db for some secret information.

@rmondello

Thank you for this!

I was delaying and thinking too hard about how to transfer.

I had no idea. But this really did make it easy and indeed covered passkeys too.

Thanks as well for your work making this possible and for sharing your thoughts. Technology, just as society, isn’t morally neutral, agree. (Hence, why I’m interested in this.)

@rmondello this is wonderful; thank you!

I have started the migration away from 1Password to Apple Password. This should fine in the interim.

The two things that isI don’t necessary like are that, 1.) the idea of the password manager updates tied to OS updates; to me that is a coupling that does not make sense. And 2.) Apple Password is bad at cross browser (Safari is not my primary browser) and platform interoperability.

Again, not really a deal breaker in the short term; but more than likely I will be looking at another migration to something that works better cross platform and cross browser.

@rmondello Oh hey I didn't know you were responsible for breaking CXF into its own proposal. Neat.

@rmondello Thanks for the write-up and for taking such a clear ethical stance.

@rmondello This is great! Any possibility of an Apple Passwords app on Linux?

@rmondello out of curiosity (this wouldn't actually benefit me), are there plans for a web client for linux/chromeos like google's password manager has?

@rmondello i recently switched from Bitwarden to Apple Passwords. i learned firsthand about the iOS-native transfer functionality when i started off with the “old way” and realized that none of my passkeys moved over 😅

it bums me out that there’s no Linux or Android support, but right now those OSs are secondary experiences for me and i’m fine leaving them out

good post!

@rmondello
> Your credentials are yours to take and manage. [...] We just needed to figure out how to enable that in a phishing-resistant way. [...] I’m talking about manually exporting an unencrypted file and [...] that was going to be a non-starter for passkeys because a threat actor could trick someone into exporting their data and then uploading it to them. That’s called phishing.

So, they're _NOT_ mine to take and manage? I do understand the need for the general population to have these bulletproof anti-foot-gun mechanisms, but, and I don't like having to export to an unencrypted file, but the point about being locked in & controlled by your password manager is still valid because, I don't think 1P or Apple Passwords will give me my passkeys outside of an Apple Approved transfer. If I, a sufficiently savvy user device that, I do in fact want to upload my passkeys to a sketchy website, that should be my own mistake. Computer should not say no.

@rmondello I was not aware of the secure transfer on iOS. That makes it easy for me switch to Apple Passwords once the 27 OSes are out (still running 15 on my Mac which misses new features there I need)

@rmondello I don't personally need this, but I think a great addition to Apple Passwords (which I love) would be apps for Android and Linux. Let the powers that be know. :)