LastPass stores passwords so securely, not even its users can access them • Hacker News Board

Re: LastPass stores passwords so securely, not even its users can access them

#11

Post by jwineinger » Mon, Jan 20, 2020, 2:44 PM UTC

filipn wrote: post #7

So glad I switched to 1Password, haven't had an issue since. They provide an easy transfer of your passwords from LastPass, you can just follow their guide and be done in 5 minutes: https://support.1password.com/import-lastpass/

Same. I switched after their thanksgiving 2018 outage and haven't looked back. Just about everything about 1Password is better than LastPass.

Re: LastPass stores passwords so securely, not even its users can access them

#12

Post by trey-jones » Mon, Jan 20, 2020, 2:44 PM UTC

scandox wrote: post #5

NopeNotToday wrote: post #2

Some alternatives: * https://keepass.info/ * https://bitwarden.com/ * https://1password.com/

Yeah they'll never go down. Why don't these systems support local storage as well? Is there greater security risk in syncing to a local device? Edit: I do not mean browser localStorage

My understanding of LastPass (I am a user) is that you _do_ in fact have offline access to your vault. Your Master Password is also the encryption key. Did I miss something?

Re: LastPass stores passwords so securely, not even its users can access them

#13

Post by matsz » Mon, Jan 20, 2020, 2:47 PM UTC

scandox wrote: post #5

NopeNotToday wrote: post #2

Some alternatives: * https://keepass.info/ * https://bitwarden.com/ * https://1password.com/

Yeah they'll never go down. Why don't these systems support local storage as well? Is there greater security risk in syncing to a local device? Edit: I do not mean browser localStorage

Bitwarden can be hosted locally.

Re: LastPass stores passwords so securely, not even its users can access them

#14

Post by kalleboo » Mon, Jan 20, 2020, 2:51 PM UTC

NopeNotToday wrote: post #2

Some alternatives: * https://keepass.info/ * https://bitwarden.com/ * https://1password.com/

I evaluated a bunch of team password managers last year.

Lastpass was really buggy and had a confusing UI. Dashlane also had odd limitations.

1password had a good UI but the "master key" system is difficult for users to use. It was also more expensive.

I ended up recommending Bitwarden. Surprisingly the open source option had a great UI and great clients, with the bonus of being open source on both ends.

Re: LastPass stores passwords so securely, not even its users can access them

#15

Post by exhilaration » Mon, Jan 20, 2020, 2:52 PM UTC

navidfarhadi wrote: post #3

If you are looking for an alternative I highly recommend Bitwarden (not affiliated with the company). I switched over from Lastpass around a year and a half ago and am very happy with the service. All of the clients and the server are 100% open source plus you can self host if you want to.

If you have a Raspberry Pi lying around, there's a docker image for the excellent bitwarden_rs server available that makes it a snap to get up and running: https://github.com/dani-garcia/bitwarden_rs/wiki/Which-conta...

Re: LastPass stores passwords so securely, not even its users can access them

#16

Post by ed312 » Mon, Jan 20, 2020, 2:52 PM UTC

tortasaur wrote: post #10

scandox wrote: post #5

Earlier quoted context omitted.

Yeah they'll never go down. Why don't these systems support local storage as well? Is there greater security risk in syncing to a local device? Edit: I do not mean browser localStorage

Keepass does support storing the database file locally. It is the default way it works.

A local-only storage solution with your own syncing is by far the best way. Also, storing low security passwords (eg Netflix) in chrome / iOS keychain seems like a pretty safe trade off to me.

Re: LastPass stores passwords so securely, not even its users can access them

#17

Post by tcd » Mon, Jan 20, 2020, 2:52 PM UTC

Keepass - choose your own way of syncing, can never go down, works without the internet etc etc.

Cloud services...lol

Re: LastPass stores passwords so securely, not even its users can access them

#18

Post by sigwinch28 » Mon, Jan 20, 2020, 2:53 PM UTC

I continue to use `pass` [0].

Luckily I'm technically minded, so it's not too hard to manage my GPG keys or manage syncing the git repo every now and then.

What it lacks in swish UI and automagically-configured browser extensions it gives in configurability, privacy, control over data, and freedom.

[0]: https://www.passwordstore.org/

Re: LastPass stores passwords so securely, not even its users can access them

#19

Post by yingw787 » Mon, Jan 20, 2020, 2:55 PM UTC

navidfarhadi wrote: post #3

If you are looking for an alternative I highly recommend Bitwarden (not affiliated with the company). I switched over from Lastpass around a year and a half ago and am very happy with the service. All of the clients and the server are 100% open source plus you can self host if you want to.

I second Bitwarden. I have >130 120-character auto generated passwords stored and can rotate / regenerate my passwords with little hassle. Also love having the self hosting option available.

Re: LastPass stores passwords so securely, not even its users can access them

#20

Post by wildchild » Mon, Jan 20, 2020, 2:56 PM UTC

navidfarhadi wrote: post #3

If you are looking for an alternative I highly recommend Bitwarden (not affiliated with the company). I switched over from Lastpass around a year and a half ago and am very happy with the service. All of the clients and the server are 100% open source plus you can self host if you want to.

Bitwarden is Electron cancer infected.