Why one shouldn't use cloud-based services. I'm sticking to keepass. (I'm syncing the keepass file over a cloud, but I still have a local copy on all my devices against cases like these)
[deleted]
LastPass stores passwords so securely, not even its users can access them
141–150 of 266 posts
Re: LastPass stores passwords so securely, not even its users can access them
#142Why one shouldn't use cloud-based services. I'm sticking to keepass. (I'm syncing the keepass file over a cloud, but I still have a local copy on all my devices against cases like these)
I'm sorry, what is your justification for not using cloud-based services? Lastpass (like pretty much all of these online password managers) will work offline, so if the service goes down, you can still access your data locally.
I've been wondering why people keep saying this. Do they not understand how password managers work??? LastPass and 1Password both work offline, the cloud is just for sync. Oy.
Re: LastPass stores passwords so securely, not even its users can access them
#143Earlier quoted context omitted.
Switched from LastPass to BitWarden over the weekend. I have 1,200+ passwords, and the transition was seamless. I even set up BitWarden on one of my web servers so that I can control my data -- even that took less than 30 minutes, thanks to BitWardenRS docker container. The only thing I have yet to figure out for BitWarden is how to get a little icon to show up next to user/password fields in forms. I just have to ri…
With BitWaden FF, you can use Ctrl+Shift+L to auto fill your most recently used account for the current website. Hope it helps.
If you have Bitwarden in Firefox's toolbar the icon will also display a number indicating the number of available credentials, and clicking the icon to open it and then clicking any of the entries autofills.
Re: LastPass stores passwords so securely, not even its users can access them
#144I continue to use `pass` [0]. Luckily I'm technically minded, so it's not too hard to manage my GPG keys or manage syncing the git repo every now and then. What it lacks in swish UI and automagically-configured browser extensions it gives in configurability, privacy, control over data, and freedom. [0]: https://www.passwordstore.org/
For Firefox there is https://addons.mozilla.org/en-US/firefox/addon/passff/ which I'm quite happy with. When combined with a yubikey set to decrypt only on touch this setup has a very low attack surface compared to other browser password managers.
This used to be my approach, but it prevented grepping through my password store (you have to touch the yubikey to decrypt each password separately)
I since switched to a separate on-device key for "low value" passwords and keep the interesting stuff (e-mail pwds) under the yubikey protected key (which does requires touch).
Did you find a better solution?
Re: LastPass stores passwords so securely, not even its users can access them
#145So glad I switched to 1Password, haven't had an issue since. They provide an easy transfer of your passwords from LastPass, you can just follow their guide and be done in 5 minutes: https://support.1password.com/import-lastpass/
I was a longtime LastPass customer, but the service just kept getting worse and worse, to the point where a year ago I realized I was spending more time fighting the user interface than it was saving me. And their support was absolutely useless. So I also switched over to 1Password, and never looked back. It is such a refreshing and trouble free experience compared to LP, and the few times I needed to ask a question,…
I still use it but their support gets super defensive if you have any criticism about it. Their "new" 1pass X still sucks and recently has been going backwards in terms of usability. They keep promising feature parity between windows/mac too but this new browser plugin seems to be their fallback excuse. If I wasn't so heavily invested in it I'd switch in a heartbeat. I need something that works across ios/mac/windows and ideally without copying passwords to clipboard, that's pretty insecure.
Re: LastPass stores passwords so securely, not even its users can access them
#146If you are looking for an alternative I highly recommend Bitwarden (not affiliated with the company). I switched over from Lastpass around a year and a half ago and am very happy with the service. All of the clients and the server are 100% open source plus you can self host if you want to.
The "Premium" service offers 2-step login (Yubikey) but is only one account. Is there a "Family Premium" ?
Both the teams and enterprise options also allow you to share any credentials within an organization/team, though the default for any new credential is no sharing. I assume that's exactly how the family plan works as well?
Re: LastPass stores passwords so securely, not even its users can access them
#147So glad I switched to 1Password, haven't had an issue since. They provide an easy transfer of your passwords from LastPass, you can just follow their guide and be done in 5 minutes: https://support.1password.com/import-lastpass/
I tried that once but ran into so many errors for passwords that contained characters like ", or ;" that I gave up. Is there a way around this other then copying every entry manually?
Yes, the lastpass exporter has an issue. You can do a search and replace.
Or you can do what I did and when I reach a site that had an issue, I would just look at the password and there would be an obvious parsing error, e.g "&" is instead "amp&" and would just modify it manually.
Only happened a few times and then all is good.
https://github.com/bitwarden/help/blob/master/_articles/impo...
Re: LastPass stores passwords so securely, not even its users can access them
#148One of the best things I've done in my personal software life recently is getting off LastPass. The only other piece of software I have seen decay in quality so rapidly and markedly is PocketCasts.
Ugh, they ruined PocketCasts when they bought it and did that major 'update'. Fortunately I found Podcast Republic the day mine updated and haven't looked back.
Re: LastPass stores passwords so securely, not even its users can access them
#149Earlier quoted context omitted.
It's a nice trick that many companies use. The best way is to build small agents to monitor the service you depend on to know whether they truly respect their SLA. In case of LastPass they don't even have an SLA....so good luck with an updated status.
I learned another nice trick from GCP the other day; Stackdriver log ingestion was down, at least for me and a number of people on Twitter, and they simply put a yellow warning at the top of status.cloud.google.com while fixing it instead of making an official incident. Magic, 100% uptime!
All providers do this where they can.
Office 365 had an issue where their DNS resolutions were fubar and impacted the service for certain customers, but their position was that the service itself was fine.
Re: LastPass stores passwords so securely, not even its users can access them
#150If you are looking for an alternative I highly recommend Bitwarden (not affiliated with the company). I switched over from Lastpass around a year and a half ago and am very happy with the service. All of the clients and the server are 100% open source plus you can self host if you want to.
I switched from LastPass to Bitwarden after LastPass started trying very hard to use the same password for every website I tried to generate one for.
Bitwarden sync can sometimes be a little slow but on the whole I am very pleased with it and would highly recommend it.