0
Answered

Why doesn't the Mac version have icloud support?

Michael Otto 3 years ago in Mac • updated by Maarten Billemont 3 years ago 7
It's pretty useless having your sites synced across your iOS devices only, isn't it?
Under review
There are a few reasons at play here, but the main ones are these:

  1. iCloud is always going to be an Apple-exclusive gig. With Master Password under development for Android and Windows, as well as the cross-platform Java and C versions, iCloud is becoming increasingly incompatible with Master Password.
  2. iCloud has issues. It had huge issues in iOS 6 and has been improved greatly in iOS 7, but it still has issues. My UbiquityStoreManager solves most of these issues, but there are still complicated flows for edge cases and unexpected issues experienced by a small group of people.
  3. Master Password doesn't need syncing. Its generated passwords are ubiquitously available whether your devices are in sync or completely unaware of each other and offline. Sync makes people worry that passwords are traversing the wire, and it adds a dependency to and issue of trust to an application that doesn't really need it.
For now, if you need to transfer your information, I recommend you use the export / import feature.  Though you shouldn't need to for generated sites.  Just create your user on the new device and as soon as you need a site's password on that device as well, add the site to it and copy its password.
It's sad to see the iCloud support disappear because it remedies one of the big problems of the master password approach: some sites don't accept the generated passwords for a numberous reasons (length, allowed/required characters,...) which means that I need to configure the generation per site. Without a central store like iCloud, I have to remember these configuration settings for these special sites. Of course, these settings are not secret, so putting them into the cloud does no harm at all.
I agree that it's one of Master Password's key features that it doesn't *need* syncing. But, nevertheless, it's *nice* to have it if ...

- you don't remember the site's exact name (think of "my home router", "that truecrypt backup file stored someplace" instead of a web site)
- you change any of the default parameters (password type, counter)

BTW: the iOS app instantly and reproducibly crashes if you enable iCloud in the preferences. Turn it off, it works.

Last word: Great concept, great app, great documentation, thank you!
I understand that there is definitely a use case for having some reliable way of storing information about your sites.  This is, after all, why I had originally reached out to iCloud.

Sadly, iCloud has not lived up to its promises, and the headaches it causes for some as well as the way Apple's restricting its use to any applications not blessed and reviewed by Apple in addition to the bad press iCloud has received recently on the security front all add up and make it obvious that iCloud is not the solution to Master Password's sync.

Perhaps in a future version, Master Password will implement a sync that's truly secure, reliable and available to all Master Password users, on all platforms and devices, without compromise.  Until then, save your custom passwords or configurations on your multiple devices manually or use the export/import features to send your configurations across.
How about syncing to Dropbox, Google Drive or the like? I wouldn't mind and it would be cross platform, too.
I'm hesitant to explicitly add third-party API such as those to Master Password.  First of all, I don't know what code they'd be injecting into your password manager (as they're closed source APIs), secondly, I don't recommend these services to anyone.  The syncing via these services wouldn't really be syncing either, it would be a very naive save/load feature that would erase or mess with any sites you created on your device while it was offline or on a slow network.  I might consider adding the ability to send your export file to an external application as opposed to just emailing it.  That might give you the freedom to use these services in-lieu of your email and might be a close-enough solution.