Live data from Hacker News

Ask HN: LastPass Alternatives

news.ycombinator.com

61–70 of 83 posts

Re: Ask HN: LastPass Alternatives

#63
post #19

I just use Firefox sync. It integrated with iOS and Android. You just install the app and use the system settings to set Firefox as the default password store for the system. It works in all apps, as far as I can tell. I wish it integrated with Linux& gnome a bit better, but I just work around that by bookmarking the browser link to the password page in Firefox. I trust Mozilla more than any random app that advertise…

I mostly use Firefox Sync as well. The main downside is that it is super basic. It can only store basically URL, username, password. There is no option it store TOTP secrets, backup codes, binary data or arbitrary information. If it text you can cheat and make "fake" entries, but it isn't good UX.

In practice I use https://www.passwordstore.org/ to fill the gaps.

Re: Ask HN: LastPass Alternatives

#64
post #41
post #34

Throughout the years I've tried most of the more popular ones on the market, some times forced via work and other times because I was curious. - KeePassXC: tried this when I was looking for a self-hosted, open-source alternative to LastPass years ago. Was surprised at how well it worked, but syncing was too much of a hassle so I gave up fairly quickly. - 1Password: my favorite of the bunch so far, great UI and UX, wo…

I really like 1password but the the only thing that keeps me away right now, and I would love to hear that it's changed, is that the only way to use 1Password outside of macOS/iOS requires the subscription service.

You used to have Dropbox/folder sync until 1Password 7 (I've used it that way on Windows since 1P4), but 1P8 dropped that. You can still use 1P7 and it'll receive security updates IIRC, but it's gone from app stores unless you already downloaded it (which is annoying in other ways too: 1P8 is missing some languages that 1P7 had).

Unless you mean subscription pricing which you could side-step before with one-time licenses, but those are gone now too.

Re: Ask HN: LastPass Alternatives

#65
post #7

1Password for me - not overly happy that they moved over to a subscription based pricing, but I’ve been using it for years now and it works well across all of my devices.

Is 1Password any less vulnerable, architecturally, to a massive hack akin to what happened recently to LastPass? I'm in the same boat as the OP and wary of putting all my stuff somewhere else that will result in a similar breach a few months from now.

1Password at least has the architectural benefit that your vault key isn't just your passphrase, but also an "account key". (Both are merged to form the actual key) So at the very least it's dramatically harder to crack, compared to running dictionary attacks on passphrases with LastPass. That's one reason I finally switched from 1Password.com + Dropbox to 1Password.com a year ago.

Re: Ask HN: LastPass Alternatives

#66

Earlier quoted context omitted.

> syncing was too much of a hassle so I gave up fairly quickly. Why can't you use Dropbox or Google Drive to sync? Seems fairly easy.

You can, and it's trivial. I've never had a problem after a decade of constant use. My KeePassXC DB is synced between my phone, tablet, desktop, and laptop, and they all stay perfectly in sync. I've been scratching my head for this whole decade about why people want some SaaS for this.

[dead]

Re: Ask HN: LastPass Alternatives

#68
post #34

Throughout the years I've tried most of the more popular ones on the market, some times forced via work and other times because I was curious. - KeePassXC: tried this when I was looking for a self-hosted, open-source alternative to LastPass years ago. Was surprised at how well it worked, but syncing was too much of a hassle so I gave up fairly quickly. - 1Password: my favorite of the bunch so far, great UI and UX, wo…

> - BitWarden: played around with this for a while, but didn't switch from 1Pass mostly because I am not willing to host something like this myself and it costs the same as 1Pass with less features and polish.

This alone makes me doubt the reliability of your assessment.

A quick google:

1password free: nope.

1password personal: 36 usd yearly

1password family: 60 usd yearly

Bitwarden free: almost every important feature available.

Bitwarden personal: 10 usd yearly

Bitwarden family: 40 usd yearly

Yeah, not even close

Re: Ask HN: LastPass Alternatives

#69

Earlier quoted context omitted.

> syncing was too much of a hassle so I gave up fairly quickly. Why can't you use Dropbox or Google Drive to sync? Seems fairly easy.

You can, and it's trivial. I've never had a problem after a decade of constant use. My KeePassXC DB is synced between my phone, tablet, desktop, and laptop, and they all stay perfectly in sync. I've been scratching my head for this whole decade about why people want some SaaS for this.

The only use case I found (though still quite possible) is if I have NO access at all to any of my devices, and I only have access to internet, and precisely - web only. I could go to 1Password website (for example, in an internet cafe or via someone’s tablet), get into my vaults with the master key and the password, and start recovering other passwords, details etc. Without SaaS, it would be barely possible.

Re: Ask HN: LastPass Alternatives

#70

Earlier quoted context omitted.

Second Bitwarden. Pretty cheap, good customer service. You can self-host if you prefer that route. The source code is on GitHub.

I’m thinking of self-hosting, but can I keep using the iOS and desktop apps?

Yes, just click on setting and type in a new URL.
Post reply on HN