Live data from Hacker News

Ask HN: LastPass Alternatives

news.ycombinator.com

71–80 of 83 posts

Re: Ask HN: LastPass Alternatives

#71

I just switched to Bitwarden after seeing it recommended on HN a bunch of times. Bought a subscription right away. I previously stored everything in Firefox, transfered it easily to Bitwarden. Linux app seems to work fine, tested in Firefox, Chrome, Android phone, smooth transition. The only thing that I've noticed is that you have to change existing passwords manually by editing records in the vault, the Firefox ext…

The extension on chromium browsers does offer to update passwords if your vault has been unlocked recently

Re: Ask HN: LastPass Alternatives

#72
1Password.

The UX is simple enough so every person in my family from wife to kids can use it. Because ensuring your family's cybersec is important as well. Teach your kids good cyber hygiene from day one.

1Password deals with the infra and software stack which is a time saver for me.

Re: Ask HN: LastPass Alternatives

#73
post #15

I use KeePass and just save the encrypted file in iCloud. Easy, end to end encrypted, always up to date, free. https://open.substack.com/pub/magoop/p/how-to-manage-500-pas...

Does KeePass supports OTP? That's one of the reasons I have stuck with 1Password.

You can store TOTP info in it for sites if that's what you mean.

Re: Ask HN: LastPass Alternatives

#77

I use a locally saved version of supergenpass https://chriszarate.github.io/supergenpass/mobile/ It combines an easily recalled password with domain to generate a longer password. I feel quite safe using this as no data is stored anywhere.

Doesn’t this mean that you can never change your password for a given site? E.g. if some retailer leaks a bunch of data and is storing passwords in plain text or something, I want to be able to rotate my password for that website.

No. You can change/rotate your own password whenever you want.

Re: Ask HN: LastPass Alternatives

#78

Earlier quoted context omitted.

Doesn’t this mean that you can never change your password for a given site? E.g. if some retailer leaks a bunch of data and is storing passwords in plain text or something, I want to be able to rotate my password for that website.

No. You can change/rotate your own password whenever you want.

Wouldn’t that change all of the passwords?

Re: Ask HN: LastPass Alternatives

#79
post #7

1Password for me - not overly happy that they moved over to a subscription based pricing, but I’ve been using it for years now and it works well across all of my devices.

Is 1Password any less vulnerable, architecturally, to a massive hack akin to what happened recently to LastPass? I'm in the same boat as the OP and wary of putting all my stuff somewhere else that will result in a similar breach a few months from now.

Yes, it is. Lastpass is uniquely poor amongst the most commonly used password managers.

https://infosec.exchange/@epixoip/109585049354200263

Post reply on HN