Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Lots of regular people use Have I Been Pwned and sending them to 1Password is probably the single best thing you could do for them (I know it's a sponsorship - but it's a very complimentary one).

I'd make the language around that promo banner stronger (ie. "We strongly recommend") and make it stand out more on the page.

So many social media accounts get hacked[0] because of shared passwords and those affected users often end up on the site - funnelling them to a password manager and a reason why it's good hygiene is great.

ps. congrats on the relaunch!

[0] I've probably assisted 20+ such cases in the past ~12 months



It's a sponsorship, so I'm not complaining, but if the goal was really to get people to use a password manager he would be sending them to Bitwarden since they have a free plan, plus their paid plan is only $10/year compared to $36 for 1Password.


Besides the pricing, is there any reason to prefer Bitwarden over 1Password? Been happily using 1Password for some years, never had any issues, but maybe I'm glossing over anything? Probably the cli interface (`op`) is the one feature I couldn't live without today.


Open-source versus proprietary and the option to self-host are the two that immediately come to mind.


I can't speak about the other password managers, but 1Password's architecture ensures even 1Password can't see any of your credentials. It's E2E Encrypted.

I've been a 1Password user for over a decade. It's user friendly, and I'd rather not have the responsibility to self-host my company and extended family's credentials.


Bitwarden is also a zero knowledge architecture built on E2EE; I would presume that is the standard in the industry.


They both do e2ee so they cannot read your secrets server-side, which is the standard.

Critically though, Bitwarden is open source, meaning that if the encryption is weakened, it would be noticed in the source.

With 1Password the clients are closed source: you have to trust the company to encrypt the secrets properly and an (malicious or accidental) change of the encryption cannot be detected by the user.

After Lastpass's fiasco around encryption, I don't feel like blindly trusting another company.


Why not bitwarden?




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: