Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LastPass bug leaks credentials from previous site

zdnet.com

Post reply on HN
Print view View original

21–30 of 196 posts

Re: LastPass bug leaks credentials from previous site

#21

Post by madamelic »

ashelmire wrote: post #17
celticmusic wrote: post #15

Is that true about LastPass being the most popular password manager? I just can't imagine it, I'm forced to use it with a client, and it has hands down the worst UI experience I've ever seen.

Really? I find this hard to believe, as a dev and internet user. Facebook, instagram, etc have far worse interfaces. You add the extension, easily add/generate/create/autofill your login info. It's usually as simple as clicking an icon that appears in the relevant field.

The vault UI is horrifyingly difficult.

Also their registration flow is horrendously awful. Try setting up a Family plan where you log out of your personal and log into your family plan and you'll see how frustratingly sticky it is.

Too many buttons and features for such a simple problem. Development is cancer.

Re: LastPass bug leaks credentials from previous site

#22

Post by nathancahill »

paulddraper wrote: post #16
celticmusic wrote: post #15

Is that true about LastPass being the most popular password manager? I just can't imagine it, I'm forced to use it with a client, and it has hands down the worst UI experience I've ever seen.

Long time last pass user...what do you recommend? Team of 15-30 people, need shared username/password credentials for web, FTP, and DB systems. Also other arbitrary secure "notes", e.g. SSH key. Needs 2FA as well.

1Password is quite nice. Migrated a team from LastPass to 1Password recently, the experience was very smooth.

Re: LastPass bug leaks credentials from previous site

#23

Post by mfer »

celticmusic wrote: post #15

Is that true about LastPass being the most popular password manager? I just can't imagine it, I'm forced to use it with a client, and it has hands down the worst UI experience I've ever seen.

LastPass has a free tier. I would expect a lot of people use that tier driving up its usage.

Re: LastPass bug leaks credentials from previous site

#24

Post by madamelic »

paulddraper wrote: post #16
celticmusic wrote: post #15

Is that true about LastPass being the most popular password manager? I just can't imagine it, I'm forced to use it with a client, and it has hands down the worst UI experience I've ever seen.

Long time last pass user...what do you recommend? Team of 15-30 people, need shared username/password credentials for web, FTP, and DB systems. Also other arbitrary secure "notes", e.g. SSH key. Needs 2FA as well.

If I recall correctly, you can use `pass` as a team and individually revoke / add keys as the team changes.

With that said, LastPass or something similar is an easier solution for a team.

Re: LastPass bug leaks credentials from previous site

#25

Post by michannne »

I remember my account was locked out completely even though I never did anything. Tried all passwords I knew, but of course you only get limited attempts (Why? If I'm using a brute-forceable password I'm already screwed, I'd rather have unlimited attempts to guess my complex password). I went through all the hoops to get a One-Time Password or whatever it was, tried it on all machines I own, no luck. That's when I decided it wasn't worth it to entrust all of my passwords to an opaque entity like that, it's not ideal, but it's better than losing access to everything I use.

Re: LastPass bug leaks credentials from previous site

#26

Post by Angostura »

nerdjon wrote: post #4

I am seriously considering alternatives to LastPass. Since they moved to a dedicated app instead of just a plugin on Mac, it is borderline unusable for me. Almost never actually fills in my passwords (often have to click copy password), often thinks I am on a different website than I am, or just gives me an empty white box when I click the LastPass button.

If you are only on Apple devices I would stay with Keychain Acess. Multi-platform? Bitwarden for me - if only for the external security audit they've done.

Re: LastPass bug leaks credentials from previous site

#27

Post by lotsofpulp »

nerdjon wrote: post #4

I am seriously considering alternatives to LastPass. Since they moved to a dedicated app instead of just a plugin on Mac, it is borderline unusable for me. Almost never actually fills in my passwords (often have to click copy password), often thinks I am on a different website than I am, or just gives me an empty white box when I click the LastPass button.

Keychain on macOS and iOS and keepassXC.

Re: LastPass bug leaks credentials from previous site

#28

Post by rmilejczz »

latchkey wrote: post #5

Switched to BitWarden a few months ago from years of using LastPass. Zero regrets... it is in every way better for my use case. Switching wasn't hard either. Even gave BW my money, it is worth supporting them.

I tell everyone I can about bitwarden. I see many colleagues using Dashlane or even LastPass but bitwarden just takes the cake for me. It does a great job at staying out of the way and reliably doing whatever it is I need it to do and I can’t recommend it enough!

Re: LastPass bug leaks credentials from previous site

#29

Post by nickthemagicman »

latchkey wrote: post #5

Switched to BitWarden a few months ago from years of using LastPass. Zero regrets... it is in every way better for my use case. Switching wasn't hard either. Even gave BW my money, it is worth supporting them.

Does Bitwarden do a phone app?

Re: LastPass bug leaks credentials from previous site

#30

Post by czbond »

latchkey wrote: post #5

Switched to BitWarden a few months ago from years of using LastPass. Zero regrets... it is in every way better for my use case. Switching wasn't hard either. Even gave BW my money, it is worth supporting them.

I'm a long time KeePassX user. What do you like about BW the most?
Post reply on HN