Bachsau

There already is a setting to disable handling of passkeys by Enpass, but it's in the browser extension options, not the Enpass app. chrome-extension://kmcfomidfpdkfieipokbalgegidffkal/pages/settings/option.html

Just don't. This is another reason why people get "hacked". You can't trust other people's devices. There is no excuse to ever log into any of your accounts on another one's device. If you feel like you need to, change your workflow. Use sharing features or emails.

Microsoft uses tokens for everything, so if you change your account passwort or email address, apps and services won't loose the connection.

Enpass' passkey support is still very basic and lacks certain features that make it very inconvenient to use. I would like to see the following improvements: I don't want to re-type my master passwort if Enpass is already unlocked (desktop version). For a password I can just fill it out by selecting it from the list or dropdown. It should be that easy with a Passkey, too. Put a confirmation button there and only ask for authentication when Enpass is locked. 2fa codes are automatically copied to the clipboard after choosing a password entry. Not so after logging in with a passkey. Make it work. System integration. Enpass on desktops works via browser extensions, but that's confined to the browser. macOS features a system-wide auto-fill since the release of Ventura, yet Enpass still doesn't integrate with it. This makes it impossible to use passkeys in apps and built-in web views where the browser extension is not available.

What's it with this "seems you haven't used Enpass for a while" anyway? Even if this would be true – there's no reason to ever repeat this verification process ever. Once connected, it's done!

Please don't follow these bad suggestions. They are very ill-considered and a good example why following customer feedback isn't always right. Unnecessary because you can always create a custom template if you wanted less or other fields. At least such buttons wouldn't be harmful, unlike your other suggestions. Definitely not. Many sites don't serve appropriate icons and Enpass only caches those icons but doesn't save them as part of the items. I use a lot of custom imported icons and am always happy if there is a pre-made one. Field names may vary and I don't want to be forced to name my fields after some specific schema. I have username fields named "Customer Number", for example, because that is what I login with on that site. Also english isn't the only language in the world. The freedom Enpass gives me with the fields was another reason for me to switch from 1Password. Instead, some field types should have a more strict typing, because currently you can enter any sort of information in a "Numeric" or "Date" field.

Apple's systems are not secure, especialy not with a simple PIN. I order to securely encrypt data, you need a secure algorithm and a long and complex key. Apple circumvents this by using hardware security devices, which of course can AND will be broken some day. If someone finds a way to get inside Apple's systems, no matter if a criminal, law enforcement or an intelligence agency, your PIN and 2FA won't save you. Don't be one of those guys using "password" for a password and don't fall for the misapprehension that complex passwords can't be remembered. Generate yourself a totally random password, write it on a piece of paper and type it in several times a day, and I promise you will remember it in no time, at which point you can discard the piece of paper.

Let me say that most of us are quite happy with a working solution that's being maintained. The notion that good things need constant changes is idiotic. What's important are bug fixes and adaption to OS and browser changes. No one needs re-designs which tend to make everything worse and forces the user to change his way of using the app. 1Password might be getting more upgrades but requires a subscription. I'd rather pay just once and use the features I get until I might decide to pay for some upgrade, instead of constant feature creep where most of those features are useless. If this is what suits you better, just do it, instead of coming here to demand Enpass becomming more like it. I switched three years ago and did not regret it. Sadly the thing about bugs and support is true. If something is broken, expect it to stay broken for a loooong time. I experienced this with iCloud sync and WebDAV if the URL contains whitespace, so I'm currently using Google Drive to sync. On the other hand I didn't have to pay another cent in three years, which is totally worth it. But I've also seen bugs being fixed, like the problem where changed passwords could be overwritten with old ones when the item was used on another device before the sync finished. Sure I wish that more bugs were fixed and would be more than happy to pay for an upgrade if it included things like PassKey support, but I don't need constant updates just so see something change. There is no reason to asume anything like that. It has been audited at least once, and if you don't do fundamental changes to the way synchronization and encryption works, that won't change. Fixing bugs and adding features to the GUI won't affect that.

Thanks, it works with a second item, even though I had to disable password checks to keep Enpass from complaining about doubled passwords – least you take that option away from us, too. Just know that no one likes to patronized and it just makes your software worse because the HTTP address was also part of the item, thus your decission goes against usability. Also, plain HTTP will always be there, especially on local networks, where you can't get a publicly trusted TLS certificate for a device. PS: Maybe a meaningful error message would also be helpful if you don't want to change the behaviour. Otherwise all the user sees is that something is not working when he double-clicks an affected item.

Enpass is on version 6.9.0, macOS 12.6.8 and Arch Linux. Add-On version is 6.8.3 on Firefox 116.0.2. The URL is "http://fritz.box/" on the local network. The FRITZ!Box by AVM is a very popular residential gateway in germany which uses this URL to host the devices's web-based control interface.

The item holds two URLs. One is a HTTPS-secured dynamic domain for external access, the other is a local one for access from inside my home network. But if I order it by double clicking the item, it should work. I am the user and the red banner in the Enpass popup is enough of a warning! Sorry, but I do not understand what you mean. The local URL is not available via HTTPS, which is no security threat since the data never leaves the local network.

I'm having the same problem. It's extremely inconvenient for local devices and still not fixed in Enpass after serveral months. I'm not using the on-page dropdown in favor of clicking the addon icon. It works however, when going to the login page by clicking the URL in Enpass.

Merging changes that have been made while some devices were still connected to another cloud provider. If you want to change clouds, first update all devices, before changing any contents. In the listing above, your third step should have been your second one. As soon as you disconnect from a cloud service, you have multiple vaults. One on all devices connected to the new cloud, and another one on those still connected with the old one.

You can buy via in-app purchase on your phone. Wechat pay does not work anywhere outside of china. But I don't think you need a US account to use PayPal. They will exchange your currency for US dollar the moment you pay.

Honestly, I wouldn't have expected this to work. You should make sure to have all your sync connections updated before making changes to fault again, and if you can't, reset Enpass on any outdated devices and do a fresh sync. Also, do not delete the the data from your old cloud before disconnecting the last device. Once you click "disconnect" on a sync connection, you end up with two separate vaults that you shouldn't expect to come nicely together again if they differ. Of more importance is that you even risk losing your password if you try to login on an different device before the sync is complete. Using an entry updates it's last used date, which updates the entry, resulting in it being overwritten with this "latest" version of the entry.

Yes, I was using the same Apple ID for Enpass that is configured in the system settings, and I would like to state that this wasn't in question if Enpass accessed the iCloud through the operating system's APIs, as it would obviously use that same connection without even asking for a login. "Sign-in with Apple" is not used by Enpass, so it can't be revoked. That single sign-in service is for third-party user accounts, not apps. If you meant to ask if the iCloud and the switch to allow Enpass to use the iCloud is enabled in system settings, the answer is yes.

In this case it was Enpass 6.8.4 from the Mac App Store on macOS 10.15.7 (older iMac). The Browser is Safari 15.6.1, but as I said, you normally don't need a browser login on macOS at all to access iCloud.

I already did but got either misunderstood or ignored. 1. I already described the problem with iCloud here, but you just gave me an FAQ link, which of course I already read, because I investigate on issues before posting. I also wrote about what I think is the root of the problem, but you don't seem to have read it. Other users on that threat also wrote that following the FAQ tip did not solve the problem. 2. Regarding my WebDAV problems, I opened three tickets (not at the same time). Two of them got deleted without notice. The third one, ECS-31081, got aknowledged after I complained on the forums. I'm still waiting for a fix. 3. Regarding the support, you already seem to be in that state of big companies, where a phalanx of supporters "protect" the developers from customers. The problem being that those supporters know nothing about the inner workings of the product. Developers should at least sometimes read the forums themselves, so they can learn about problems firsthand. The problem described in this thread (new entries overwritten with older ones) should not have happened at all. It is an obvious sign of bad software design. 4. In all Desktop versions, Categories and Tags are sometimes missing from the sidebar. This seems to happen mostly when startup takes longer than usual, so I guess it's a race condition. Enpass needs to be restarted for them to show up again. The iOS version sometimes displays wrong website icons on several entries after new items have been synced to the device. The correct icons re-appear after scrolling them out of screen and back. These are rather small errors, but they have existed for several versions now. I'm a coder myself, so I know what I'm talking about. You should stop developing new features for a while and focus on optimizations and bug fixing.

This doesn't work for long and I told you why. As I already said, Enpass is the only app with this problem. iCloud sessions do not expire for other apps or Enpass on iOS. If you would access the iCloud the same way on macOS as you do on iOS, this problem would not exist. Maybe the way you access the iCloud is the only way on Windows and Linux, but at least on macOS you should access it by means of the operating system.

The way Enpass connects to the iCloud on iOS is the right way to do it. The macOS version uses a different approach, which might allow you to set it up with a different account, but also causes the session timeout problem, because it's not the way it's meant to be done by Apple. Furthermore you shouldn't share accounts with your wife. Encourage her to get her own ones.

I think I will be going back to 1Password soon. Enpass is just a bundle of bugs. It has the better concept, but the developers obviously don't know what they're doing. iCloud sync is buggy, WebDAV is buggy, data gets lost. Support is bad, tickets get deleted, and there is no way for customers to talk to the developers directly.

Enpass is the only app with this problem. It is also the only app which creates its own session through a web browser. Why doesn't it use the operating system's APIs to access iCloud like every other app? This problem only exists because Enpass uses iCloud in a way it isn't meant to be used. Normally, if the Mac is properly connected with an Apple ID, applications don't need any additional authentication at all to access iCloud.

Hardware keys can never beat a good passphrase. They will either be cracked some day or be destroyed, resulting in data loss.

I just answered your followup questions via email. However, I really would like to know why my previous tickets were just deleted.

No, you don't. Just post your whole life publicly on the internet and be done with it. Until this happens. If you don't care about your privacy and security, noone can help you.