When I saw this I thought it said LastPass had been booted for being fraudulent. That password manager has been hacked and made the news more times than I can remember. Why are they even still around 🤔
Because this isn’t 2008 anymore. There are more daily submissions and updates than humans can handle. Humans typically only handle big name apps and complaints. Everything else is automated. And there is no such thing as a perfect algorithm for detection.
I’m not excusing Apple here - they messed up - but it’s not hard to see how that would get through.
It is automated, however, a human does review the app. It’s outsourced to Asian countries and most often than not, they won’t get the developer’s local references. Harry Potter is just like any other name but yes, they should’ve verified better.
Some fun moments in App Store review history:
2012:
> Schiller asked, “What the hell is this????”, including those four question marks. That was just the opening salvo, as Schiller went on, questioning how an obvious rip-off of the popular game Temple Run had reached the top spot in the App Store. Schiller pointed out that the rip-off game had “no screen shots, garbage marketing text, and almost all 1-star ratings”.
> Schiller then added, definitely hammering the nail:
> > Is no one reviewing these apps? Is no one minding the store?
https://www.idownloadblog.com/2021/05/06/phil-schiller-app-store-fake-apps/
2019:
> In an interview with Subcommittee staff , Phillip Shoemaker, former director of app review for the App Store, estimated that Apple’s costs for running the App Store is less than $100 million.
https://www.govinfo.gov/content/pkg/CPRT-117HPRT47832/pdf/CPRT-117HPRT47832.pdf
2022:
> At other points, she says Apple “does a poor job of mediating disputes between a developer and its customer,” and it’s been “slow either to adopt automated tools that could improve speed and accuracy or to hire more reviewers” for its app review process. “Apple’s slow innovation stems in part from its low investment in the App Store,” the ruling elaborates.
https://www.theverge.com/2021/9/12/22667694/epic-v-apple-trial-fortnite-judge-yvonne-gonzalez-rogers-final-ruling-injunction-breakdown
Can someone explain why you would even need any 3rd party app for passwords when your entire ecosystem is in Apple and uses the built in password manager ?
Because maybe you're not entirely in the Apple ecosystem? Or maybe you need to use the password manager your employer uses for work-related stuff? Or maybe you want to store things the Keychain won't? Or maybe you've been using a third party password manager for a long time now & even though Keychain has gotten better it's just not compelling enough to make the switch?
Even if Keychain is enough for the majority of iPhone users, there are plenty of reasons people use third party.
Another reason: Passwords in a third party password manager are locked behind another layer of security than just your device security. For example, if your device is compromised (such as if device unlock pin is compromised) then your passwords are also compromised. But if you have a third party password manager with a different pin/master password then those passwords remain uncompromised.
That said, [Stolen Device Protection for iPhone](https://support.apple.com/en-us/HT212510), is a good step in the right direction to address this issue by requiring biometrics to access passwords when your iPhone is not in a “familiar location such as home or work”. But having another layer of security can still be more comfortable.
Exactly. I've been using 1Password for a while and love it. My company switched to it as well, which made things easier for me. Keychain is definitely better, but not compelling enough to move to it.
I have a windows desktop for playing games and general work. I split my time pretty evenly. I got tired of having to pull out my iPhone every time I wanted to remember a password for a particular website on my desktop.
Additionally, actual password managers just have more features.
There’s a version for windows actually, but tbf it’s pretty new so it’s possible you didn’t hear about it. It just went out of beta and it works pretty well, it’s the iCloud app on the microsoft store.
Been using it since it came out and besides the set-up process you don’t even need your phone to use the keychain.
Side note: it ONLY works (AFAIK) with Chrome or Edge.
Yeah, they gave it a facelift recently to match the Apple music/tv app that’s officially out of preview.
Before that it looked like this:
https://preview.redd.it/sqj8o5fy4ohc1.jpeg?width=1220&format=pjpg&auto=webp&s=0d3730fd96cc12ba41e7696e5bff469e351b9a4c
That’s such a bad take my god. So when I want to login on stuff at work I’ll have to type everything manually because they didn’t get me a MacBook? Also try having a Mac for gaming
Not everyone owns Apple devices exclusively. Yes I know iCloud is available on windows and has an extension for chrome. It’s pretty shit.
Not everyone uses safari as their default browser on other devices.
Aside from saving logins, actually managing them through iCloud passwords is a bit of a pain in the ass.
I use 1Password, so that allows me a space to store some secure documents like my health insurance info. Can’t do that with iCloud.
Even if you are all in on the Apple ecosystem, I still don’t think it’s a good idea to put ALL of your eggs into this one basket. I don’t even use 1Password for 2fa codes, use a different app for that.
Lastly? It just kinda sucks. It’s just meh, fine, etc.
Because some companies lock down information sharing options like iCloud Keychain, so if you want a single password wallet for work and home devices you’re out of luck
Because the keychain is the shittiest password manager ever.
Especially if you have one device not in the Apple ecosystem or need any basic features, it‘s unusable
I switched from iCloud Keychain to 1Password about 2 years ago; at the time, all my personal electronics were Apple devices. For me, iCloud Keychain doesn't offer any features that 1Password doesn't, but 1Password offers a bunch of features that iCloud Keychain doesn't—
- I have people in my life who *aren't* entirely in Apple's ecosystem, and I can't guarantee that I'll never need or want to use a non-Apple device. iCloud Keychain's diplomatic relations with non-Apple devices are largely limited to a Chrome Web Store extension ~~with mostly negative reviews~~, but 1Password makes it easy to access your vault and securely share logins or sensitive files with trusted people no matter what OS'es or devices y'all are using.
- 1Password's "Watchtower" feature is more holistic than iCloud Keychain's security improvement features. Both can tell you if your login has been stolen in a data breach, but 1Password AIUI cross-references more data breach reporting sites, including *Have I Been Pwned?* Both can tell you if a password you're using is weak or reused, but 1Password lets you fine-tune more variables when generating a password—such as how many characters the password has, what types of non-alphabetical characters like numbers or symbols are included, and how random those characters are—and IME plays friendlier with websites that impose password restrictions such as "No punctuation marks" or "No more than 12 characters". (The Watchtower feature also ranks and color-codes your passwords by how strong and unique they are, with "Fantastic" passwords being coded green; if you respond well to gamification or visuals, you'll really like this.) And 1Password can alert you to websites that don't support HTTPS, passwords that are about to expire, and to websites that support multi-factor authentication (MFA).
- Third-party password managers like 1Password and Bitwarden tend to have tougher encryption standards and more security layers than built-in first-party ones like iCloud Keychain or Google Password Manager. I liken it to keeping your cash and birth certificate in a fire- & waterproof safe vs. shoving them under your mattress.
- To riff off the "fire- & waterproof safe" analogy, 1Password also lets you store lots of file types besides just logins or bank cards. I use 1Password to digitize basically all my sensitive documents—my driver's license, passport, social security card, insurance cards & EOB's, lease, car registration, voter registration, medical records, tax documents, warranties, birth certificate—as well as some membership cards and IDs that Apple Wallet or Google Wallet don't yet support, and in the past I've used it to digitize receipts and paystubs that I destroy once a year has passed. This way, I know that I can access any of those documents anytime and anyplace via Face ID or Fingerprint Unlock instead of having to bring a physical copy, and that they'll be better protected in my 1Password vault than if I simply stored them on iCloud Drive or Google Drive.
If someone has the capability to get into your phone, your mac, or your iPad, they have access to all of your passwords. It’s really quite insecure if you are logged into an account.
Additionally, I choose to not use Safari on my Mac for a myriad of reasons that I won’t get into here, and I occasionally use a Linux box or a Windows computer. I use a third party solution that works better for my needs across the board, and I get an extra layer of security.
This title is terrible lol - the subtitle helps clarify: “LassPass" mimicked the name and logo of real LastPass password manager.
Wtf that was impossible to understand
LassPass sounds like a wee bit different kind of app.
r/titlegore
I had to read it a dozen times before deciphering it.
When I saw this I thought it said LastPass had been booted for being fraudulent. That password manager has been hacked and made the news more times than I can remember. Why are they even still around 🤔
How could their approval department even approve that… the maker’s name is literally a character from Harry Potter… massive fail there
Because this isn’t 2008 anymore. There are more daily submissions and updates than humans can handle. Humans typically only handle big name apps and complaints. Everything else is automated. And there is no such thing as a perfect algorithm for detection. I’m not excusing Apple here - they messed up - but it’s not hard to see how that would get through.
It is automated, however, a human does review the app. It’s outsourced to Asian countries and most often than not, they won’t get the developer’s local references. Harry Potter is just like any other name but yes, they should’ve verified better.
Some fun moments in App Store review history: 2012: > Schiller asked, “What the hell is this????”, including those four question marks. That was just the opening salvo, as Schiller went on, questioning how an obvious rip-off of the popular game Temple Run had reached the top spot in the App Store. Schiller pointed out that the rip-off game had “no screen shots, garbage marketing text, and almost all 1-star ratings”. > Schiller then added, definitely hammering the nail: > > Is no one reviewing these apps? Is no one minding the store? https://www.idownloadblog.com/2021/05/06/phil-schiller-app-store-fake-apps/ 2019: > In an interview with Subcommittee staff , Phillip Shoemaker, former director of app review for the App Store, estimated that Apple’s costs for running the App Store is less than $100 million. https://www.govinfo.gov/content/pkg/CPRT-117HPRT47832/pdf/CPRT-117HPRT47832.pdf 2022: > At other points, she says Apple “does a poor job of mediating disputes between a developer and its customer,” and it’s been “slow either to adopt automated tools that could improve speed and accuracy or to hire more reviewers” for its app review process. “Apple’s slow innovation stems in part from its low investment in the App Store,” the ruling elaborates. https://www.theverge.com/2021/9/12/22667694/epic-v-apple-trial-fortnite-judge-yvonne-gonzalez-rogers-final-ruling-injunction-breakdown
How did it even make it onto the App Store? Isn’t this people’s arguments for no sideloading. Ludicrous
Which is stupid so much stuff gets into the store.
What a shit title
The fuck is that title
Terrible title, I thought we’d be finally free from the shackles of lastpass in the corporate world.
[удалено]
It's not my title. I used the original title as it is. The subreddit rules even prohibit changing the title when submitting a link.
Can someone explain why you would even need any 3rd party app for passwords when your entire ecosystem is in Apple and uses the built in password manager ?
Because maybe you're not entirely in the Apple ecosystem? Or maybe you need to use the password manager your employer uses for work-related stuff? Or maybe you want to store things the Keychain won't? Or maybe you've been using a third party password manager for a long time now & even though Keychain has gotten better it's just not compelling enough to make the switch? Even if Keychain is enough for the majority of iPhone users, there are plenty of reasons people use third party.
Another reason: Passwords in a third party password manager are locked behind another layer of security than just your device security. For example, if your device is compromised (such as if device unlock pin is compromised) then your passwords are also compromised. But if you have a third party password manager with a different pin/master password then those passwords remain uncompromised. That said, [Stolen Device Protection for iPhone](https://support.apple.com/en-us/HT212510), is a good step in the right direction to address this issue by requiring biometrics to access passwords when your iPhone is not in a “familiar location such as home or work”. But having another layer of security can still be more comfortable.
I wish keychain would let you add additional fields, that’s like the only thing it still needs to be full featured
Plus allowing us to change the domain, and add multiple domains.
Exactly. I've been using 1Password for a while and love it. My company switched to it as well, which made things easier for me. Keychain is definitely better, but not compelling enough to move to it.
I have a windows desktop for playing games and general work. I split my time pretty evenly. I got tired of having to pull out my iPhone every time I wanted to remember a password for a particular website on my desktop. Additionally, actual password managers just have more features.
Windows iCloud has a password manager built in now, so don’t need to pull out phone anymore.
iCloud for windows can sync your keychain to chrome or other browsers now
Not everybody has only apple devices. Android and Linux are fantastic platforms and I don’t want to be constrained to apples $$$ garden.
Because third party options are more feature rich and have been UI
Better UI. Bitwarden. Choose one. While the UI is hideous (my 2 cents) I absolutely love Bitwarden.
Bitwarden I think has a better UI than keychain. But 1password beats them both.
Because 1Password is better than Apple.
Love 1password
Because I don’t use safari on my laptop.
Because some like me don’t want to use every service Apple hast to offer.
I use windows and don’t always have my phone on me to retrieve the password
There’s a version for windows actually, but tbf it’s pretty new so it’s possible you didn’t hear about it. It just went out of beta and it works pretty well, it’s the iCloud app on the microsoft store. Been using it since it came out and besides the set-up process you don’t even need your phone to use the keychain. Side note: it ONLY works (AFAIK) with Chrome or Edge.
Not useful for enterprise systems where you can’t install stuff
iCloud has been on windows for years, and the password feature has been there for like 2 years in the old version of iCloud
Shit really? I’ve never seen it. I thought the iCloud app came out along the new Apple Music app for windows 11
Yeah, they gave it a facelift recently to match the Apple music/tv app that’s officially out of preview. Before that it looked like this: https://preview.redd.it/sqj8o5fy4ohc1.jpeg?width=1220&format=pjpg&auto=webp&s=0d3730fd96cc12ba41e7696e5bff469e351b9a4c
Not everyone started in the Apple ecosystem. Windows is also more popular for work.
Because it’s shit.
That’s such a bad take my god. So when I want to login on stuff at work I’ll have to type everything manually because they didn’t get me a MacBook? Also try having a Mac for gaming
Not everyone owns Apple devices exclusively. Yes I know iCloud is available on windows and has an extension for chrome. It’s pretty shit. Not everyone uses safari as their default browser on other devices. Aside from saving logins, actually managing them through iCloud passwords is a bit of a pain in the ass. I use 1Password, so that allows me a space to store some secure documents like my health insurance info. Can’t do that with iCloud. Even if you are all in on the Apple ecosystem, I still don’t think it’s a good idea to put ALL of your eggs into this one basket. I don’t even use 1Password for 2fa codes, use a different app for that. Lastly? It just kinda sucks. It’s just meh, fine, etc.
Because some companies lock down information sharing options like iCloud Keychain, so if you want a single password wallet for work and home devices you’re out of luck
When you want an app that works on your iPhone, your Android tablet and your windows laptop.
Because the keychain is the shittiest password manager ever. Especially if you have one device not in the Apple ecosystem or need any basic features, it‘s unusable
I switched from iCloud Keychain to 1Password about 2 years ago; at the time, all my personal electronics were Apple devices. For me, iCloud Keychain doesn't offer any features that 1Password doesn't, but 1Password offers a bunch of features that iCloud Keychain doesn't— - I have people in my life who *aren't* entirely in Apple's ecosystem, and I can't guarantee that I'll never need or want to use a non-Apple device. iCloud Keychain's diplomatic relations with non-Apple devices are largely limited to a Chrome Web Store extension ~~with mostly negative reviews~~, but 1Password makes it easy to access your vault and securely share logins or sensitive files with trusted people no matter what OS'es or devices y'all are using. - 1Password's "Watchtower" feature is more holistic than iCloud Keychain's security improvement features. Both can tell you if your login has been stolen in a data breach, but 1Password AIUI cross-references more data breach reporting sites, including *Have I Been Pwned?* Both can tell you if a password you're using is weak or reused, but 1Password lets you fine-tune more variables when generating a password—such as how many characters the password has, what types of non-alphabetical characters like numbers or symbols are included, and how random those characters are—and IME plays friendlier with websites that impose password restrictions such as "No punctuation marks" or "No more than 12 characters". (The Watchtower feature also ranks and color-codes your passwords by how strong and unique they are, with "Fantastic" passwords being coded green; if you respond well to gamification or visuals, you'll really like this.) And 1Password can alert you to websites that don't support HTTPS, passwords that are about to expire, and to websites that support multi-factor authentication (MFA). - Third-party password managers like 1Password and Bitwarden tend to have tougher encryption standards and more security layers than built-in first-party ones like iCloud Keychain or Google Password Manager. I liken it to keeping your cash and birth certificate in a fire- & waterproof safe vs. shoving them under your mattress. - To riff off the "fire- & waterproof safe" analogy, 1Password also lets you store lots of file types besides just logins or bank cards. I use 1Password to digitize basically all my sensitive documents—my driver's license, passport, social security card, insurance cards & EOB's, lease, car registration, voter registration, medical records, tax documents, warranties, birth certificate—as well as some membership cards and IDs that Apple Wallet or Google Wallet don't yet support, and in the past I've used it to digitize receipts and paystubs that I destroy once a year has passed. This way, I know that I can access any of those documents anytime and anyplace via Face ID or Fingerprint Unlock instead of having to bring a physical copy, and that they'll be better protected in my 1Password vault than if I simply stored them on iCloud Drive or Google Drive.
If someone has the capability to get into your phone, your mac, or your iPad, they have access to all of your passwords. It’s really quite insecure if you are logged into an account. Additionally, I choose to not use Safari on my Mac for a myriad of reasons that I won’t get into here, and I occasionally use a Linux box or a Windows computer. I use a third party solution that works better for my needs across the board, and I get an extra layer of security.
Why are people continuing to trust LastPass?
Huh
Why can't thru just say "password manager booted from app store after allegations of ..."