Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: LastPass Alternatives

news.ycombinator.com

Post reply on HN
Print view View original

41–50 of 83 posts

Re: Ask HN: LastPass Alternatives

#41

Post by hk1337 »

sondr3 wrote: post #34

Throughout the years I've tried most of the more popular ones on the market, some times forced via work and other times because I was curious. - KeePassXC: tried this when I was looking for a self-hosted, open-source alternative to LastPass years ago. Was surprised at how well it worked, but syncing was too much of a hassle so I gave up fairly quickly. - 1Password: my favorite of the bunch so far, great UI and UX, wo…

I really like 1password but the the only thing that keeps me away right now, and I would love to hear that it's changed, is that the only way to use 1Password outside of macOS/iOS requires the subscription service.

Re: Ask HN: LastPass Alternatives

#42

Post by hk1337 »

LinuxBender wrote: post #12

KeePassXC can be synchronized to/from any public or private cloud platform using your existing sync tools specific to each platform. [1] The benefit being cloud-agnostic and avoiding vendor lock-in. [1] - https://keepassxc.org/docs/#faq-cloudsync

I do that but with Syncthing.

Re: Ask HN: LastPass Alternatives

#43

Post by ctenb »

RcouF1uZ4gsC wrote: post #11

Does anyone know of an open source tool that will reliably export LastPass entries to the other formats or even a csv? The LastPass exporter IME is very unreliable.

I had no trouble with the built-in csv exporter, but had to do some manual fixes in the text editor before it could be satisfactory imported into bitwarden

Re: Ask HN: LastPass Alternatives

#44

Post by LinuxBender »

hk1337 wrote: post #42
LinuxBender wrote: post #12

KeePassXC can be synchronized to/from any public or private cloud platform using your existing sync tools specific to each platform. [1] The benefit being cloud-agnostic and avoiding vendor lock-in. [1] - https://keepassxc.org/docs/#faq-cloudsync

I do that but with Syncthing.

Good point. Edited to include public or private clouds.

Re: Ask HN: LastPass Alternatives

#45

Post by aborsy »

auxym wrote: post #35
aborsy wrote: post #25

KeepassXC is a thick client password manager. Password store might be even more secure. If you want “seamless sync of your secrets” by a trusted 3rd party with an online vault, well, then, Bitwarden or 1Password. But the architecture is roughly the same as that of lastpass (though they also encrypt URLs, and might have better KDF, and operational security). In particular, you should assume that 3-letter agencies snap…

I use Keepass(XC) across all my devices, windows, Linux and android. I sync the DB with Nextcloud and encrypt with a combination of password and keyfile. The keyfile is a few KB of /dev/random and I only transfer it "offline" between devices (mostly over USB to/from my phone).

I could suggest a small improvement: a diceware password instead of directly taking the output of /dev/urandom. That would allow you to easily and securely exchange the symmetric key by typing it.

Also, /dev/urandom instead of /dev/random (as seed to diceware).

Re: Ask HN: LastPass Alternatives

#46

Post by hk1337 »

joegahona wrote: post #9
3guk wrote: post #7

1Password for me - not overly happy that they moved over to a subscription based pricing, but I’ve been using it for years now and it works well across all of my devices.

Is 1Password any less vulnerable, architecturally, to a massive hack akin to what happened recently to LastPass? I'm in the same boat as the OP and wary of putting all my stuff somewhere else that will result in a similar breach a few months from now.

I don't know if I would say it is based purely on syncing with 1Password.com like you do with LastPass but I would on the fact (AFAIK they still offer these options) you can choose where to sync your vault, 1Password.com, iCloud, Dropbox, FTP, locally between devices. So, from an attacker viewpoint going after 1Password.com wouldn't necessarily get all the 1Password users.

Re: Ask HN: LastPass Alternatives

#47

Post by aussiesnack »

joegahona wrote: post #9
3guk wrote: post #7

1Password for me - not overly happy that they moved over to a subscription based pricing, but I’ve been using it for years now and it works well across all of my devices.

Is 1Password any less vulnerable, architecturally, to a massive hack akin to what happened recently to LastPass? I'm in the same boat as the OP and wary of putting all my stuff somewhere else that will result in a similar breach a few months from now.

I just don't have the security expertise to make the judgement, and, let's face it, that's true of most of us. Which is of course why you're asking, but you're not guaranteed to get answers from people you know to be any more knowledgeable than you. Somewhere you have to rely on good old human trust.

Finding the info re where to place your trust is tricky. I happen to have been personally recommended 1Password by a genuine security expert who uses it for his family, and that's about the best I can do. I know Agilebits pays for regular 3rd party security audits / pen tests. I guess you could look further into those. I know they're financially sustainable so can afford the expertise they need (which is part of why I think subscription a good model for software like this - I want Agilebits to be on a long-term secure footing). As far as we know publicly, they also have an excellent security record (which LastPass didn't even before the recent breach).

[edit - there's more info here https://support.1password.com/security-assessments/]

Re: Ask HN: LastPass Alternatives

#48

Post by hk1337 »

LinuxBender wrote: post #44
hk1337 wrote: post #42

Earlier quoted context omitted.

I do that but with Syncthing.

Good point. Edited to include public or private clouds.

I didn't mean to say what you said was inaccurate. I clicked the link because I thought it was some KeepassXC option for cloud sync but it was just an FAQ saying you can save your vault file on various cloud platforms.

Just an additional since even KeepassXC didn't mention it.

Re: Ask HN: LastPass Alternatives

#50

Post by nowherebeen »

sondr3 wrote: post #34

Throughout the years I've tried most of the more popular ones on the market, some times forced via work and other times because I was curious. - KeePassXC: tried this when I was looking for a self-hosted, open-source alternative to LastPass years ago. Was surprised at how well it worked, but syncing was too much of a hassle so I gave up fairly quickly. - 1Password: my favorite of the bunch so far, great UI and UX, wo…

> syncing was too much of a hassle so I gave up fairly quickly.

Why can't you use Dropbox or Google Drive to sync? Seems fairly easy.

Post reply on HN