Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What is your password management solution?

news.ycombinator.com

Post reply on HN
Print view View original

241–250 of 320 posts

Re: Ask HN: What is your password management solution?

#241

Post by tptacek »

bastijn wrote: post #232
tptacek wrote: post #217

Earlier quoted context omitted.

1Password is the only commercial password manager I recommend, but I'll go further than that when it comes to LastPass and say: I really think you should avoid LastPass, and, if you're using it, migrate to something else. I'm not going to go into details, sorry.

Why do the trouble of replying but fail to explain your reasons? That's wasting your own time mostly. I would recommend 1password over lastpass as well. First reason being the security issues of lastpass chrome extension. Though claimed it is fixed now they have claimed before on other issues only to be proven wrong after. I simply don't trust them anymore with my data. But even more I would choose 1password over its…

I understand why it makes people uncomfortable to know that they're not getting all the information I could possibly convey in a comment.

I don't see how that would make it better for me to not comment at all.

Re: Ask HN: What is your password management solution?

#242

Post by codefined »

kintalo wrote: post #234
oAlbe wrote: post #219

Earlier quoted context omitted.

Not when resetting your password requires physically going to the bank to sign a document and get it mailed to you after a week... But yeah, it works in most cases.

seems like a reason to switch banks.

Don't all banks do this? Here in the UK it basically seems mandatory. Try to change your password/phone/email, they'll send you an actual letter which has a passcode you need to enter in to the website. Although mine took only a day to arrive.

Re: Ask HN: What is your password management solution?

#243

Post by antongribok »

dannysu wrote: post #23

I use KeePassXC [1], which is open-source, and I sync it across my iPhone, Windows laptop, and Linux desktop via Tresorit [2] (like Dropbox but end-to-end encrypted). It's secured with a password that I know, and a keyfile that I have. I don't sync the keyfile and always manually transfer to new computers. I also use Arq [3] to automatically backup to S3 every hour, and I also do manual backup to my external backup d…

I've used various KeePass variants for the past 10 years or so. For anyone on Windows, I still recommend the original at http://keepass.info/.

For everyone else KeePassXC is really nice.

I really like that there are so many "clones" and variants that can read/write the file format natively: https://en.wikipedia.org/wiki/KeePass#Unofficial_KeePass_rel...

Re: Ask HN: What is your password management solution?

#244

Post by skinnymuch »

I use 1Password and have used it for 5+ year a now and love it. I used to pay one time fees. They were doing a sale for their pricey subscription service when my business partner got interested in using a password manager. So he bought an annual subscription for the both of us at a sale price. I think it ends up being $60 a year for the both of us.

Being able to use different shared password vaults has helped us a lot. As our business entails going through lots of quick sites before moving on to new ones, along with working with different partners.

Sure it still isn't "cheap", but I get a good app and browser plugins on all major platforms.

I highly prefer 1PW to Lastpass because it is much easier to get a lot of different form fields saved into 1PW along with easily adding any number of your own. Lastpass plugins also aren't the greatest.

I'd move to KeePass if I hadn't to stop using 1PW. But I doubt I'll switch while doing business. Shared repos integrated tightly into the UX is too helpful.

Re: Ask HN: What is your password management solution?

#246

Post by curun1r »

latkin wrote: post #186
curun1r wrote: post #53

Earlier quoted context omitted.

The subscription isn't really mandatory, but I've been quite disappointed at the transparency with which they've been pushing people towards that...even those of us that purchased the full version somewhat recently. For instance, the complete lack of a Windows version that isn't subscription based is a huge pain since I got a cheap Kodi box recently and my keyboard is a remote control that sucks for typing passwords.…

https://1password.com/downloads/ still links to the 1Password v4 version for Windows, which supports local vaults. And shameless plug for my own cross-platform powershell-based 1Password client, which can read both formats of local vaults: https://github.com/latkin/1poshword

I tried the v4, but it wouldn't accept my v6 license key :(

My workaround was to write a small utility that I run on both my Mac and Windows boxes that sits in the background and keeps the two clipboards synchronized. So I just copy from Mac 1p and paste in Windows. Not ideal, since it makes the browser extension useless, but it works well enough for the few times that I need to enter passwords on that box. But on the plus side, I can also use it for entering commands in cmd.exe and Powershell too.

Re: Ask HN: What is your password management solution?

#247

Post by skinnymuch »

chaitanya wrote: post #215
tptacek wrote: post #175

Earlier quoted context omitted.

If you're not going to use 1Password, which is still the only commercial password manager I'll recommend, "pass" is probably your best alternative.

As a LastPass user, any particular reasons why I should avoid them? Is it down to all the security issues they've faced lately?

Neither are deal breakers for me, but I get issues with their plugins sometimes.

The deal breaker for me before vs 1PW was that I would store quite a bit of info in 1PW for some logins. Filling out a whole sign up form might include birthday security question/answer, name, and more. For various reasons, I don't always use real info so having this info automatically saved or easily added as new fields is great. I know Lastpass has a few extra field options and a notes section within each login, but the fields aren't enough and I don't want to have to manually add all the info into the notes like some people I know do. I'd rather pay a few dollars more a month and get the convenience and time saved.

I'm sure it makes up for the extra ~$25 a year. And the family plan at $60 a year for up to 5 family members isn't a bad deal in my opinion either if that can work for you. I know it sucks compared to buying the apps one time, but I don't feel it is as bad the outcry was/still is.

I guess I'm looking at this strictly in terms of what is best for my day to day life. It's not worth it worrying about a few extra dollars a month when I only have a handful of subscriptions as it is.

Re: Ask HN: What is your password management solution?

#248

Post by atacama »

temporaneous wrote: post #137

I memorize my passwords and reuse them to a large extent. Strength of the password is actually a lot less important than the website's security and the value of the account. * relatively weak/old passwords for sites I don't care about and would lose nothing if they were compromised (vast majority) * a couple relatively strong passwords for the 5-6 sites I don't want compromised, but wouldn't have huge consequences an…

I used to do exactly the same and even the moving passwords to less important sites. Now I use iCloud generated pwds for all but vital services.

Re: Ask HN: What is your password management solution?

#249

Post by skinnymuch »

Piccollo wrote: post #131

Dashlane

I wonder how successful Dashlane is. HN is not the best place to gauge how something is doing, but barely any mentions of Dashlane. Enpass the other known password manager got a number of mentions besides the "big 3" (Lastpass, 1PW, KeePass).

Re: Ask HN: What is your password management solution?

#250

Post by [deleted] »

inertial wrote: post #191
benjaminjosephw wrote: post #13

`pass` is a nice command line tool that stores gpg2 encrypted password files. It's simple, super handy and doesn't require you to trust any third party with what you're storing. website: https://www.passwordstore.org/ man page: https://git.zx2c4.com/password-store/about/

Switched from pass to gopass recently : ( https://github.com/justwatchcom/gopass ). It's open source and has a tad bit more features over pass. Some of the reasons for my choice to switch: - compatible with pass - support for multiple stores - store binary data (e.g. QR codes for seeding 2FA) : upcoming - report / track issues on github.com/justwatchcom/gopass/issues - more details here : https://www.justwatch.com/go…

[deleted]
Post reply on HN