Enpass.
Ask HN: What is your password management solution?
231–240 of 320 posts
Re: Ask HN: What is your password management solution?
#232Earlier quoted context omitted.
As a LastPass user, any particular reasons why I should avoid them? Is it down to all the security issues they've faced lately?
1Password is the only commercial password manager I recommend, but I'll go further than that when it comes to LastPass and say: I really think you should avoid LastPass, and, if you're using it, migrate to something else. I'm not going to go into details, sorry.
Why do the trouble of replying but fail to explain your reasons? That's wasting your own time mostly.
I would recommend 1password over lastpass as well. First reason being the security issues of lastpass chrome extension. Though claimed it is fixed now they have claimed before on other issues only to be proven wrong after. I simply don't trust them anymore with my data.
But even more I would choose 1password over its usability. I used lastpass before but switched during the past few security issues reported. I have never looked back. 1Password is much better integrated in your mobile devices. The app feels more robust and is easier to operate. In addition the whole process of setting up your devices felt easier and more secure using 1password.
Second. My wife understands it which is a big plus. She doesn't complain anymore about the cumbersome lastpass. We keep a shared vault as well. That alone is worth every penny and maybe the only reason I keep with a commercial password manager. I don't think she will use the alternatives.
I would strongly advice you to at least try it. It claims to be able to import your lastpass though personally I didn't try as my lastpass was a bit of a mess.
Re: Ask HN: What is your password management solution?
#233https://www.lastpass.com Free to use, auto password generation, has an iOS app with thumb print unlock (saves you from typing in a long master password). I personally really enjoy it.
I don't understand the hate against Lastpass. Why would I trade it's awfully simple features (autofill on Android, automatically save/update passwords from website forms in browser, cheap etc.) for something like Keepass, even if the latter is purportedly a bit more secure? Some people also say that Lastpass's UI isn't great, but who cares about a password manager's UI as long as it does the job?
>purportedly a bit more secure?
The worst bugs in LastPass are:
1. Four months ago a bug was discovered by project zero[1] about how all of your passwords can be stolen just by making a user visit a webpage. Moreover, any code can be executed remotely, compromising your entire computer. Discussion[2]
2. Later on the day vulnerability (1) was published, another was found. Project zero bug report. [3]
3. Last year a software engineer who wasn't a security researcher found a bug[4], which again, gives all your passwords.
4. The bug in (3) wasn't fixed properly, which lead to this [5]
Other bugs, but not as terrible as the ones I listed above
Jul 27 2016 [6]
Mar 25 2017 [7]
Jun 17, 2015 [8]
Nov 17, 2015 [9]
You are also forgetting a whole another class of attacks - Phishing [10]
[1]: https://bugs.chromium.org/p/project-zero/issues/detail?id=12...
[2]: https://news.ycombinator.com/item?id=13924737
[3]: https://bugs.chromium.org/p/project-zero/issues/detail?id=12...
[4]: https://labs.detectify.com/2016/07/27/how-i-made-lastpass-gi...
[5]: https://bugs.chromium.org/p/project-zero/issues/detail?id=11...
[6]: https://bugs.chromium.org/p/project-zero/issues/detail?id=88...
[7]: https://bugs.chromium.org/p/project-zero/issues/detail?id=12...
[8]: http://www.businessinsider.com/security-expert-describes-las...
[9]: http://www.martinvigo.com/even-the-lastpass-will-be-stolen-d...
Re: Ask HN: What is your password management solution?
#2341) Make up a unique password on the spot. 2) Log in and forget it. 3) Reset password. Works every time.
Not when resetting your password requires physically going to the bank to sign a document and get it mailed to you after a week... But yeah, it works in most cases.
seems like a reason to switch banks.
Re: Ask HN: What is your password management solution?
#235Earlier quoted context omitted.
The problem with this solution is that it is only as strong as your master password. Because you suggest to 'never write or store [it] anywhere' it can't be strong enough. To say it in Bruce Schneier's words: "Pretty much anything that can be remembered can be cracked."[1] [1] https://boingboing.net/2014/02/25/choosing-a-secure-password...
Maybe you have something that calculates what is strong enough? Is there some online calculator?
Online calculator for password strength, what a great idea!
I've got to offer one on my website (gimme all your passwords, mwahahaha!)
Re: Ask HN: What is your password management solution?
#236I used KeePass on Windows, and I use KeeWeb on Mac. KeeWeb is fast to search, allows for the inclusion of arbitrary data and tags, has a password generator, and it does autotype, which is nice. Also, it's open source.
Re: Ask HN: What is your password management solution?
#237https://spideroak.com/personal/encryptr
You can have this on MacOS, Windows, your smartphone.
Great when you only have your phone with you and you need to login somewhere to do stuff.
Re: Ask HN: What is your password management solution?
#238Oh I gotta show off my Keepass (http://keepass.info) with Ubuntu on Win10 setup which I just sorted out this week. The Keepass DB is saved on Dropbox.
I use it for all my passwords but crucially also as a SSH Agent for Bash, Git, Pycharm and WinSCP. My SSH keys are in Keepass and it gets used by Git, Pycharm and WinSCP. So all I need to do is unlock the database and it just works when using SSH in Bash or Pycharm or WinSCP or Git.
Anyway, the setup was a bit tricky to find out but it works very well (for me) now. I have documented it here because it might be useful to others: https://gist.github.com/duebbert/6a152ad2030e8dcb6d860802758...
Re: Ask HN: What is your password management solution?
#239Roboform
Ah. I used to love Roboform and bought it for $20 for life but then they changed their minds about honouring that so I went elsewhere. Lastpass currently.
Re: Ask HN: What is your password management solution?
#240Earlier quoted context omitted.
1Password is the only commercial password manager I recommend, but I'll go further than that when it comes to LastPass and say: I really think you should avoid LastPass, and, if you're using it, migrate to something else. I'm not going to go into details, sorry.
LastPass is the only commercial password manager I recommend. I really think you should avoid 1Password. I'm not going to go into details, sorry.
You do much work in this field?