Keychain & 1password co-exist

Options
rcme
rcme
Community Member

Can I leave keychain fully active and safari saving passwords and use 1password as well? Both co-existing and saving the same passwords. I like features of 1password like sharing some passwords with others, but I like the safari keychain sync with my iPhone and iPad. Also, when I share passwords with my wife through 1password, she would like the safari keychain sync with the iPhone and iPad as well. I do not like using a separate browser on the iPhone and I do not want to look up a password every time I need one on my iPhone.

Comments

  • Stephen_C
    Stephen_C
    Community Member
    Options

    Can I leave keychain fully active and safari saving passwords and use 1password as well?

    Yes, that will work.

    I like the safari keychain sync with my iPhone and iPad.

    I use 1P for Mac on my Mac and 1P for iOS on my iPhone and iPad. I just prefer to have all my passwords and other secure data locked safely under one master password. OS X keychain access is in effect protected only by your login password on OS X. Admittedly 1P for iOS can't integrate quite as well as 1P for Mac but if you use 1P5 for iOS on the iPhone (which requires iOS 8) it can integrate now with Safari (and any other browser that works with 1P to allow integration—like iCab Mobile).

    I like, too, having other details (like passport, credit card, travel insurance) with me when I travel (and I keep those in 1P so they're available on my Mac and on my iOS devices).

    Your way will work without any problem. I'm merely giving another perspective. :)

    Stephen

  • littlebobbytables
    littlebobbytables
    1Password Alumni
    Options

    Hi @rcme‌

    As Stephen_C has pointed out, if you're using iOS 8 on your iOS devices you know have access to iOS Extensions which we took immediate advantage of. This is our page on the iOS Extension and will give you a better idea of how it works. I don't believe there is a way to sync your Safari keychain between Apple IDs so your wife would have to do what you're currently doing, populating her keychain and having that sync with her devices. That might be one area where 1Password could have an advantage.

    Can I ask, when you say you share passwords with your wife are you using Share option when you right click on an item in your vault or are you using a secondary vault that you're sharing between you for all your common logins?

  • rcme
    rcme
    Community Member
    Options

    I see what you are both saying and I may take the route of full integration. What I mean by sharing is that on any store or website, we both use the same username and password and not two different accounts. So with 1password, I can share what we have the same with her it looks like.
    I have seen webpages on getting my data from Keychain to 1password. It does seem a bit convoluted and I am concerned about loosing things. Do either of you have a link to what works the best for getting keychain data into 1password?

  • Stephen_C
    Stephen_C
    Community Member
    Options

    @MrC, who is the forum's import expert, has, if I recall correctly, written an importer to import data from the OS X keychain into 1P. However, please don't rely on my recollection :) . He'll be along and will be able to tell you better than I can.

    Stephen

  • MrC
    MrC
    Volunteer Moderator
    Options

    I was just reading this thread and saw the notification appear. You can import your OS X Keychain data into 1Password with a converter.

    See:

    https://discussions.agilebits.com/discussion/30286/mrcs-convert-to-1password-utility/p1

  • rcme
    rcme
    Community Member
    Options

    All the feedback here has been helpful.

    This is a collection of what I learned from following MrC's link and reading comments and answers through the discussion.

    Started with the tool MrC's

    After the download, open the readme file and follow the directions. With the change in OSX, not all the passwords are in the login.keychain file anymore. When you get to the step under the Exporting Keychain that says “security dump-keychain……” go to this address and follow the instructions first.
    http://selfsuperinit.com/2014/01/20/exporting-icloud-keychain-passwords-as-a-plain-text-file/

    I created a keychain that I copied all the items I wanted converted into it. It is helpful to use the script in the comments below the main article.

    When that is complete, go back to the readme where you left off. In the command line, substitute login.keychain to whatever_you_created.keychain. I had difficulties with the allow script in the readme file. In the discussions I was pointed to the following allow script that worked.
    https://gist.github.com/rwest/1583781#file-click_allow-scpt

    From there I finished with the original readme file to completion.

    I thank MrC for all of his efforts. It took awhile to track through all the discussions and find the final solution.

  • rcme
    rcme
    Community Member
    Options

    Now that I have all the passwords in the vault, I am reading through the online manual and thinking about syncing with my mobile devices as well as syncing with my wife. From what I have read, I would sync my main vault to my mobile devices through the iCloud. The items to share with my wife, I would create a Spouse vault in Dropbox and move all the passwords I want to share with her to that vault. Then on my mobile device, I would connect to that vault as well. On my spouses computer account, I would create a vault and then connect to the spouse vault. I would connect to the spouse vault in Dropbox for her as well. There we have the items we share connected.
    Is this the correct or easiest way since we each have our own iCloud account?

  • littlebobbytables
    littlebobbytables
    1Password Alumni
    Options

    Hi @rcme‌

    It sounds like you understand the concept yes. Obviously the devil is in the details (when isn't it) so if you have any questions at any point just give us a yell.

    • The use of a secondary vault means you and your wife don't have to worry about one person changing or adding anything and forgetting to inform the other, Dropbox will take care of it.
    • Due to the inability to share anything between Apple IDs, secondary vaults are restricted to Dropbox. Now you can go down one of two routes, you can share a single Dropbox account but if you need your own that's fine too as Dropbox allows you to share folders between Dropbox accounts.

    As I say, having read your last post you seem to understand the high level steps required and if you have any queries please do post back here :smile:

This discussion has been closed.