Free download of 1Password 2.5.3, courtesy Macworld
The utility formerly known as 1Passwd, which holds a place of pride in the app folders of many, is currently free for the downloading from Agile Web as part of a Macworld newsletter promotion (no, you don't need to subscribe to download). Since 1Password normally retails for $29.95, this is a bargain -- however, downloaders note that the promotional license is not eligible for upgrading to future versions, nor does it grant the user access to the online version of 1Password, so beloved by iPhone owners.For anyone managing a lot of web form passwords and signup info, 1Password's ease of entry and Keychain integration are definitely worth a look. Of course, once they get you hooked... that's why the first sample is always free.
Thanks to everyone who sent this in.
![TUAW [Cafepress]](http://www.blogsmithmedia.com/www.tuaw.com/media/tuaw-cafepress-promo.png)
Reader Comments (Page 1 of 2)
David said 11:17AM on 11-05-2007
Nice! I've never seen the point until I watched their video, and now I understand!
Reply
David said 11:18AM on 11-05-2007
Nice! I've never seen the point until I watched their video, and now I understand!
Reply
Dave Barnes said 11:40AM on 11-05-2007
I bought it about 1 year ago.
Use it 10+ times a day.
Great product.
Reply
Frank said 11:59AM on 11-05-2007
i bought it earlier this year, and i love it. i use it every day, several times a day.
Reply
Matt said 12:01PM on 11-05-2007
does it work with leopard?
Reply
Mitch said 12:32PM on 11-05-2007
This is a great product!!
Reply
JR said 12:43PM on 11-05-2007
I've just downloaded this 1passwrd App, and it has a SERIOUS
security flaw:
It requires me to allow 1password to connect to their
website to register, and this happens
AFTER it prompts me for my admin password -- which in effect, means
that all my address book, my whole decrypted keychain, and all my
secrets can be sent during the registrations process, without my consent or knowledge.
These are the 2 problems that need to be fixed:
1 -- the fact that web-registration happens after my admin password
is asked for.
2 -- the fact that registration requires network access. The very
nature of this program should require that It NEVER connects to the
web. How can I safely put my credit cards
and all my passwords to my whole life in this one place and this app
now is able to send them to agilewebsolutions.com without my consent
or knowledge?
This could be the worst Trojen out for Mac OS X yet.
Reply
David Teare said 12:59PM on 11-05-2007
I just wanted to add that 1Passwd is directly integrated into Firefox *AND* Safari. This is a critical distinction from all the other password managers and autofill programs. Your passwords, form data, and identity information are all shared across both browsers.
Reply
David Teare said 1:01PM on 11-05-2007
Weird; my comment seemed to be merged with another user's comment. Comment #8 was from a different user. Here is what mine said:
@Matt: 1Password is working on Leopard.
@JR: I agree with you that we should not require Internet access for registration, so we do not require it. If you drag-and-drop the license card from your email to the 1Password Licenses window, then there is no need for net access. The other method of registration is when you click the registration link from within the license email; this method connects to our server to download your license. This is completely voluntary and we have an alert message that warns you of this before proceeding.
Regarding the Admin password, it is needed in Leopard because of the new requirements on Input Managers (i.e. the ownership needs to be root:admin).
Cheers!
--Dave Teare
Co-author of 1Password
Reply
Matt W said 1:45PM on 11-05-2007
Great, great product. Definitely next to shadowclipboard as my two most used utilities.
Reply
Roustem said 1:51PM on 11-05-2007
@JR: David already replied to your post. I just wanted to add that the Admin password you mentioned in your post is not requested by 1Password application, it is requested by Mac OS X to run the script that has to write to the /Library/InputManagers folder which is owned by root in Leopard. 1Password does not receive the password that you enter.
You can find more information about privileged operations with authorization services here:
http://developer.apple.com/documentation/Security/Conceptual/authorization_concepts/03authtasks/chapter_3_section_3.html
You can run also the script manually instead:
http://forum.agilewebsolutions.com/viewtopic.php?p=11457#11457
Reply
Buckingham said 2:45PM on 11-05-2007
After installing 1Password, there is a system log entry that fires hourly: 1Password keychain backup starting. Which process is doing the automatic backup and how do I stop it?
Reply
mark said 5:35PM on 11-05-2007
My interest was piqued by this:
"...the online version of 1Password, so beloved by iPhone owners."
So I went to the 1Password web site for more info. Took me a while, but I finally found it.
•••••> Bottom line: 1Password on the iPhone does *not* provide autofill in mobile Safari.
Reply
mark said 5:36PM on 11-05-2007
[My previous post was truncated by the use of an apparently "illegal" character.] :-)
My interest was piqued by this:
"...the online version of 1Password, so beloved by iPhone owners."
So I went to the 1Password web site for more info. Took me a while, but I finally found it.
•••••> Bottom line: 1Password on the iPhone does *not* provide autofill in mobile Safari.
On 10.6.07, a user in the 1Password forum wrote:
"...there's absolutely no way to use [1Password's] information [while using mobile Safari]. Instead, you have to write down or remember your username and password, then go to the site, and type it in correctly.
If you've used 1Passwd/1Password to generate a password for you, the odds of you typing it in properly or remembering it without writing it down are slim to none.
This is nothing more than a list of passwords on your iPhone. It doesn't "tie in" to iPhone Safari at all."
And the developer's reply (on the same day):
"In the current version of 1Password for iPhone, the goal was to allow you to access your information from your iPhone. We are now working on solutions to allow you to autofill this information. Rome was not built in a day; it will take some time but we have some great solutions in mind."
Further posts, as recent as a few days ago, indicate that this limitation presently remains. I'm sure it's a great app, but iPhone users should know that this is not yet a "comprehensive" iPhone solution.
Reply
Otsego_Undead said 9:18PM on 11-05-2007
Downloaded it today. Loving it. very handy and easy to use! well done.
Reply
Otsego_Undead said 9:18PM on 11-05-2007
Downloaded it today. Loving it. very handy and easy to use! well done.
Reply
butch said 9:32AM on 11-06-2007
I has similar concerns about security. I dragged the license into the app and watched as it connected and sent "registration" information. Suddenly occurred to me that I might be sending a LOT more than registration info. I disabled 1passwd and then manually changed all my passwords again. While I love the functionality and idea of the product, it contains ALL my info and just one line of code could exploit every piece of info I have. The registration process is unsettling. Where is my password info stored for 1passwd? I deleted the program and plist, but if I reinstall it still shows all my info. I would love to use the program, but am very wary.
Reply
butch said 9:34AM on 11-06-2007
PS - That's "have" similar concerns. I wasn't raised by wolves!
Reply
David Teare said 2:15PM on 11-06-2007
@butch: 1Password only connects to our servers if you want us to. This includes signing up to the newsletter, using the automatic license registration process, checking for updates, and viewing videos or documentation.
All of these are optional, and they can all be disabled or avoided. You are more than welcome to run Little Snitch and block every network request.
With that said, I need to say it would be completely crazy for us to want to steal your information. We have 5 full time people working on 1Password and we are working on a product we love and supporting a user community we also love. It would be irrational for us to trade this for an unknown amount of money that would make us criminals.
I think both Steve Jobs and Steve Wozniak have proven that there is a lot more money to be made working on stuff you love than stealing.
Reply
butch said 2:41PM on 11-06-2007
David,
I didn't mean to contend that the folks at Agile would be interested in this information. I was more concerned that the info could be intercepted, or possibly that the site I was directed to was a fake, and my information might have been misdirected to some nefarious persons, or even that the license I received was fake and directed my info elsewhere. Is there any possibility or this? Just wary of putting all my eggs in one basket.
thanks...
Reply