2026-09-08 12:52 UTC
Replies (40)
-
@WarnerCrocker@mastodon.social 2026-09-08 12:56
@rmondello@hachyderm.io Thanks!
-
@ashah@mastodon.social 2026-09-08 13:01
@rmondello@hachyderm.io TIL passwords are optional in Apple Passwords 🙌🏻 Excited for the new OS updates coming 🔜
-
@kbsez@mstdn.social 2026-09-08 13:06
@rmondello@hachyderm.io Ricky, if I was going to leave #1Password (which I am) and needed a Multiplatform password manager that could sink across all them, what would you pick? Current front runner for me is Proton since I'm using their mail and VPN platform. (lots of folks giving their opinions lately but I would love your take on who you'd pick )
-
@digitalqualms@mastodon.online 2026-09-08 13:08
@rmondello@hachyderm.io I appreciate your work inside and out of Apple!
-
@buck@mastodon.social 2026-09-08 13:18
@rmondello@hachyderm.io I ended up, after lots of testing of various alternatives, on Strongbox (Apple friendly front-end for Keepass).
-
@operator@vis.social 2026-09-08 13:21
@rmondello@hachyderm.io how to copy old passkeys from Apple Keychain to other Pw App?
-
@bluefirex@mastodon.online 2026-09-08 13:42
@rmondello@hachyderm.io I was not aware of the secure transfer on iOS. That makes it easy for me switch to Apple Passwords once the 27 OSes are out (still running 15 on my Mac which misses new features there I need)
-
@tay@tech.lgbt 2026-09-08 13:48
@rmondello@hachyderm.io > Your credentials are yours to take and manage. [...] We just needed to figure out how to enable that in a phishing-resistant way. [...] I’m talking about manually exporting an unencrypted file and [...] that was going to be a non-starter for passkeys because a threat actor could trick someone into exporting their data and then uploading it to them. That’s called phishing. So, they're _NOT_ mine to take and manage? I do understand the need for the general population to have these bulletproof anti-foot-gun mechanisms, but, and I don't like having to export to an unencrypted file, but the point about being locked in & controlled by your password manager is still valid because, I don't think 1P or Apple Passwords will give me my passkeys outside of an Apple Approved transfer. If I, a sufficiently savvy user device that, I do in fact want to upload my passkeys to a sketchy website, that should be my own mistake. Computer should not say no.
-
@QuietMisdreavus@squad.town 2026-09-08 14:00
@rmondello@hachyderm.io i recently switched from Bitwarden to Apple Passwords. i learned firsthand about the iOS-native transfer functionality when i started off with the “old way” and realized that none of my passkeys moved over 😅 it bums me out that there’s no Linux or Android support, but right now those OSs are secondary experiences for me and i’m fine leaving them out good post!
-
@leo@60228.dev 2026-09-08 14:17
@rmondello@hachyderm.io out of curiosity (this wouldn't actually benefit me), are there plans for a web client for linux/chromeos like google's password manager has?
-
@fnando@fnando.com 2026-09-08 14:43
@rmondello@hachyderm.io just tried moving the Apple Passwords (thanks for article). It feels very sluggish and I don't have a crazy amount of things to justify it. I miss some features (e.g. archiving instead of deleting), but I could live without it. Will try it out some more. Thanks again!
-
@cwalkatron@mastodon.social 2026-09-08 15:08
@rmondello@hachyderm.io This is great! Any possibility of an Apple Passwords app on Linux?
-
@ujay68@mastodon.world 2026-09-08 15:44
@rmondello@hachyderm.io Thanks for the write-up and for taking such a clear ethical stance.
-
@cthos@mastodon.cthos.dev 2026-09-08 15:45
@rmondello@hachyderm.io Oh hey I didn't know you were responsible for breaking CXF into its own proposal. Neat.
-
@macronaut@mas.to 2026-09-08 15:45
@rmondello@hachyderm.io this is wonderful; thank you! I have started the migration away from 1Password to Apple Password. This should be fine in the interim. The two things that I don’t necessary like are that, 1.) the idea of the password manager updates tied to OS updates; to me that is a coupling that does not make sense. And 2.) Apple Password is bad at cross browser (Safari is not my primary browser) and cross platform interoperability. Again, not really a deal breaker in the short term; but more than likely I will be looking at another migration to something that works better cross platform and cross browser.
-
@ujay68@mastodon.world 2026-09-08 15:49
@rmondello@hachyderm.io Talking about features, also of other PW managers: 1. There’s an iOS feature that forces Face ID or Touch ID for some access on stolen devices, disabling the device code. Does this extend to the Apple Passwords app? 2. Any chance of getting attachments on a list of possible features? That’s the one reason I use an extra local non-synced keepass db for some secret information.
-
@lywyn@mstdn.social 2026-09-08 15:58
@rmondello@hachyderm.io I signed up for a year of NordPass and then was immediately blocked from using with work machines due to security policy. NO VPNs. Which is enforced by blocking the authentication websites for VPN services. NordVPN uses the same authentication site for NordPass so blocked. I was advised to use a service that did not offer a VPN service as well 🤦♂️
-
@mpwg@fedi.at 2026-09-08 17:59
@rmondello@hachyderm.io feature request: a way to have apple password work on Linux. (And maybe make it just a browser extension without local installation)
-
@tylercheung@mastodon.social 2026-09-08 18:32
@rmondello@hachyderm.io I've mostly switched over from 1password 7 installs, just some secure notes/text fields didn't seem to make it over from whatever export file format I outputted from 1password Now I just have to sit down and either use iCloud for windows for my windows firefox usage at work, or maybe figure out a way to regularly sync the work entries from Apple Passwords to Firefox's password manager....
-
@kn@hachyderm.io 2026-09-08 18:34
@rmondello@hachyderm.io Thank you for publishing this. I will probably use it soon. As I emailed 1Password, I’m giving it another week, then switching over to Apple Passwords. Would rather not patronize a business that gives DHH money.
-
@rkison@mastodon.social 2026-09-08 18:55
@rmondello@hachyderm.io Thanks for this post. How are duplicates handled when importing to Passwords? I have quite a few credentials that exist in both 1P and in Passwords
-
@dscoti@mstdn.social 2026-09-08 19:23
@rmondello@hachyderm.io Thank you, Ricky, for this post and insight. Great write up. I was an early adopter of 1Password, like 2.x. I hated the way they were going and the loss of native iOS and Mac apps settled it. I was on Bitwarden for a while, then switched when Apple released Passwords. I use Uplock and Notes secured with a different password than my Apple Account (ID). However, like you, I still have an old version of 1Password hanging around.
-
@slink@fosstodon.org 2026-09-08 19:24
@rmondello@hachyderm.io Thank you for the writeup. I have one question: > Nobody should feel locked into their password manager. :) Is there an option to migrate to self hosted FOSS with a Linux client?
-
@nathansnelgrove@mastodon.social 2026-09-08 19:38
@rmondello@hachyderm.io great post, thanks! I am considering this move for my family. How does Apple passwords handle one-time passwords that update every ten seconds?
-
@clickhere@mastodon.ie 2026-09-08 19:43
@rmondello@hachyderm.io Thank you so much!
-
@kai@typo.social 2026-09-08 20:21
@rmondello@hachyderm.io thank you Ricky! Who would have thought that I am now, in the nick of time, motivated to update to iOS 26!
-
@kai@typo.social 2026-09-08 20:29
@rmondello@hachyderm.io also, thanks for that last section. Well done you!
-
@jpallas@hachyderm.io 2026-09-08 21:36
@rmondello@hachyderm.io This is an issue for me: The Passwords app unlocks using Face ID, Touch ID, or your device passcode or Mac login password. You cannot set a different “master” password. My 1P master passphrase is much stronger than my device passcode or login password. Is there a sound argument for why it doesn’t need to be?
-
@adrianco@mastodon.social 2026-09-08 22:15
@rmondello@hachyderm.io 1password7 on my iPhone doesn’t have an export option in Settings->Advanced. Not sure how to get the old passwords out…
-
@richardstocks@infosec.exchange 2026-09-08 22:52
@rmondello@hachyderm.io Is there any chance of getting Apple Passwords to provide a list of items imported and items skipped, with a reason as to why? I’ve found that I’ll send (say) 100 items, 50 are added to Passwords and 50 just vanish. I then have to manually audit to work out why. On the Apple side of the CXF fence, it would also be amazing if it could handle things like credit cards (automatically add to Wallet Autofill) and secure notes (add to Notes). Actually expand that last bit: take anything textual and add to Notes, and tag it with the source data type.
-
@jeffehobbs@mastodon.social 2026-09-08 23:48
@rmondello@hachyderm.io this is great! I love the tone and the humility of it. I can share this with my family and not feel weird. Nice work!
-
@petersibley@mastodon.social 2026-09-08 23:51
@rmondello@hachyderm.io thanks for the update!
-
@jaanus@iosdev.space 2026-09-09 06:50
@rmondello@hachyderm.io thank you Great post A few years ago I switched from 1PW to Passwords+Notes and it has been fine I did it like a caveman one by one, no export/import, because as you recommend I used it as an opportunity to audit and verify my accounts (and throw out a bunch of nonfunctional ones) There were no passkeys back then so the manual process was fine My only concern right now is that passkeys are this opaque blob hidden in Passwords, and I can’t access their “source of truth” directly
-
@jmuspratt@mastodon.social 2026-09-09 13:07
@rmondello@hachyderm.io Excited to try this as I'm thinking of migrating (1P->Passwords), but I'm getting "Export 0 items to Passwords?" Have you heard of this? I do have multiple accounts and vaults, but am trying to move just one.
-
@ezekiel@hachyderm.io 2026-09-12 17:21
@rmondello@hachyderm.io My biggest regret is NOT doing a full migration and deleting everything. It's left me with a mess in the old app and kinda prevents me from migrating back until I clear it up. This is not helped by the fact that macOS always saves generated passwords to the Passwords app (unlike iOS which saves them to 1Password)
-
@tomas@iosdev.space 2026-09-12 20:04
@rmondello@hachyderm.io I would love to ditch 1Password but there are two things that lock me in: 1. SSH keys managed via 1P SSH agent are much safer than keeping them with a passphrase on disk. Keeping the passphrase in the Apple Keychain provides the key for all processes (in terminal sessions). I didn't find a good alternative. 2. With export I lose a lot of important fields for my 1P records. I would need to go through all of them and process these…
-
@grievousangel@ravenation.club 2026-09-13 08:54
@rmondello@hachyderm.io Very good and clear. Thank you.
-
@rishidass@mastodon.social 2026-09-13 09:08
@rmondello@hachyderm.io How would you move all of the other data such as credit cards over to Passwords app?@ljpuk@twit.social
-
@milkb0at@mastodon.art 2026-09-14 09:40
@rmondello@hachyderm.io This is lovely. Thank you. 2 questions: 1. The official Apple docs talk about export/import CSV, so is there a page I'm missing? https://support.apple.com/en-gb/guide/iphone/iph984b8ac1f/26/ios/26 2. From a previous blog post of yours, you talked about switching very slowly, which I've been doing, but it means I have now have duplicates on both old (LastPass) and new (Passwords). What happens to these duplicates when I do this export trick?
-
@pauls@social.lol 2026-09-22 08:03
@rmondello@hachyderm.io While I've got too many 1Password family members/vaults to deal with, I've made a huge effort to get my own vault over to Apple Passwords. The 1Password export option into Passwords crashes all the time and I've had no response from 1Password to try and identify which entries are causing the issue. In fact maybe it's more the Apple Passwords side that causes 1Password to crash 🤷🏻♂️ I've painstakingly duplicated from 2012, month by month into a separate vault, enabled Travel Mode so only exports that vault and singled out all the logins that cause the crash. As per the screenshot I had a lot of entries where the date Added does not contain a valid YEAR. The only fix for these was to manually create a new Login entry in 1Password and copy/paste all fields into the new one then delete the old one. This took a long time but eventually I've found and fixed them all so the export to Apple Passwords finally worked!