Does anyone know of an open source tool that will reliably export LastPass entries to the other formats or even a csv?
The LastPass exporter IME is very unreliable.
Ask HN: LastPass Alternatives
11–20 of 83 posts
Re: Ask HN: LastPass Alternatives
#12KeePassXC can be synchronized to/from any public or private cloud platform using your existing sync tools specific to each platform. [1] The benefit being cloud-agnostic and avoiding vendor lock-in.
Re: Ask HN: LastPass Alternatives
#13Re: Ask HN: LastPass Alternatives
#14Earlier quoted context omitted.
Second Bitwarden. Pretty cheap, good customer service. You can self-host if you prefer that route. The source code is on GitHub.
I’m thinking of self-hosting, but can I keep using the iOS and desktop apps?
Yes, as far as I remember, you can enter the host you want to connect to in the settings.
EDIT: docs: https://bitwarden.com/help/change-client-environment/
Re: Ask HN: LastPass Alternatives
#15I use KeePass and just save the encrypted file in iCloud.
Easy, end to end encrypted, always up to date, free.
https://open.substack.com/pub/magoop/p/how-to-manage-500-pas...
Re: Ask HN: LastPass Alternatives
#16I use a locally saved version of supergenpass
https://chriszarate.github.io/supergenpass/mobile/
It combines an easily recalled password with domain to generate a longer password. I feel quite safe using this as no data is stored anywhere.
Re: Ask HN: LastPass Alternatives
#171Password for me - not overly happy that they moved over to a subscription based pricing, but I’ve been using it for years now and it works well across all of my devices.
Is 1Password any less vulnerable, architecturally, to a massive hack akin to what happened recently to LastPass? I'm in the same boat as the OP and wary of putting all my stuff somewhere else that will result in a similar breach a few months from now.
I'm not a security expert or cryptographer so take with a grain a salt, but I've been trying to understand what flawed architectural decisions LastPass made, and based on the critiques I've seen by some security/cryptographer folks (on Twitter, mostly) it does seem that 1Password is less vulnerable. It seems the key derivation, number of rounds, and unencrypted metadata (e.g. the website associated with the credential) are factors that made LastPass more vulnerable.
AFAICT, 1Password encrypts all metadata, their key derivation is stronger, and the use more rounds. Their security whitepaper [0] goes into a ton of detail. I'm more comfortable with my choice in 1Password (I previously used LastPass years ago, and need to rotate some old passwords that were still in LastPass).
[0]: https://1passwordstatic.com/files/security/1password-white-p...
Re: Ask HN: LastPass Alternatives
#18vim ~/docs/passwords.gpg
Re: Ask HN: LastPass Alternatives
#19I just use Firefox sync. It integrated with iOS and Android. You just install the app and use the system settings to set Firefox as the default password store for the system. It works in all apps, as far as I can tell. I wish it integrated with Linux& gnome a bit better, but I just work around that by bookmarking the browser link to the password page in Firefox.
I trust Mozilla more than any random app that advertises on random podcasts. I like that it warns me when sites I use have been compromised, and that it is generally easy to use. That said, I am not a security expert, so I am interested to see if anybody has any concerns about this setup.
Re: Ask HN: LastPass Alternatives
#20Bitwarden. Very straight forward and open source
I was shocked at how many people still used LastPass when Bitwarden is out there, being better in pretty much every way.