My employer has started blocking 1Password.com recently, breaking my ability to access my passwords and Two-Factor Authentication (2FA) details using the browser extension. I can still get these details on my phone, but typing a completely random 22-character password by hand is far from ideal, and a bit of a pain in the rump, to be honest. This isnāt their most egregious āsecurity theatreā policy, but it is one of the most impactful (to me).
Cards on the table, I š 1Password, and have been a paying customer for several years. If my access and ability to securely login/sign-up to stuff wasnāt being impeded by another party, Iād happily keep chugging away without much further thought. Their software has been super useful, convenient, and improved how I approach my personal online security.
As it is though, I started thinking about migrating from 1Password to Bitwarden; the ability to easily self-host Bitwarden being the main attraction in this scenario. Between hosting costs and upgrading to a āProā tier account for in-app 2FA generation, it would work out about $15-20 a year more expensive than I pay for 1Password, but thatās not a huge amount in the grand scheme of things.
However.
The most immediate concern would be rebuilding my password vault accurately, complete with all the 2FA details I need ā which is a lot. Thatās going to take a lot of time and effort to move across, even with an export recreating everything ā at the very least Iām going to have to check and verify everything imported correctly and that Iām not locked out of anything. And my digging into this hasnāt confirmed that all item types I use in 1Password can be exported across to Bitwarden.
However, part two.
Unless you happen to have an installation of the native applications for macOS or Windows (say, because corporate policy prohibits and prevents it, and you no longer run either of those OSās at homeā¦), thereās no way to export your data. At all. 1Password then becomes a silo you canāt easily get out of. The only way out is to manually recreate all of your data elsewhere. When your vault starts getting above more than a few dozen items, thatās a lot of work. Mine stretches into the hundreds.
Itās something I hadnāt really thought about before I started the thought exercise around potentially moving away. When we talk about silos, normally weāre talking about social media locking your posts and user data inside their networks. An everyday utility like a highly-convenient password manager rarely factors into it. And yet, here I am. I guess I forgot my initial misgivings about 1Password.com, and didnāt check ahead for an exit strategy.
Iām not certain how Iām going to proceed from here. 1Password themselves havenāt given me a reason to quit their service, but Iād be lying if I said this realisation of how ālocked inā I am didnāt bug me and push me to migrating as an itās-the-principle-of-the-thing āeff youā moment.
Itās something to revisit in the new year.