Live data from Hacker News

LastPass stores passwords so securely, not even its users can access them

theregister.co.uk

181–190 of 266 posts

Re: LastPass stores passwords so securely, not even its users can access them

#181

On a side, am I the only person that doesn't like The Register write style, especially the headings? Yeah, irony and fun all that you want, but it ends up looking like a gossip/tabloid magazine

>The Register write style, especially the headings

Basically all mainstream journalism coming out of the UK is garbage (FT & economist excluded I guess). Even the BBC has been showing some partisan leanings lately

Re: LastPass stores passwords so securely, not even its users can access them

#182
post #155

Earlier quoted context omitted.

I was a longtime LastPass customer, but the service just kept getting worse and worse, to the point where a year ago I realized I was spending more time fighting the user interface than it was saving me. And their support was absolutely useless. So I also switched over to 1Password, and never looked back. It is such a refreshing and trouble free experience compared to LP, and the few times I needed to ask a question,…

I've never used LastPass, why do people use it (or other password managers) instead of the built in browser password manager?

Until not so long ago, the browsers' password storages provided absolutely zero security. They are better now, but still password managers offer some advantages. For me the most important is the ability to use multiple browsers. But there's other stuff: random password generator, ability to store custom key/value pairs, 2FA, etc.

Re: LastPass stores passwords so securely, not even its users can access them

#183
post #7

So glad I switched to 1Password, haven't had an issue since. They provide an easy transfer of your passwords from LastPass, you can just follow their guide and be done in 5 minutes: https://support.1password.com/import-lastpass/

Bitwarden is also very good

LP to Bitwarden as well here. The only issue I've found so far is MFA doesn't seem to be working on the (Linux) Firefox plugin, this could be a user error issue as I've not had time to look into it yet (only noticed it this morning).

Re: LastPass stores passwords so securely, not even its users can access them

#185
post #173

Earlier quoted context omitted.

I still use it but their support gets super defensive if you have any criticism about it. Their "new" 1pass X still sucks and recently has been going backwards in terms of usability. They keep promising feature parity between windows/mac too but this new browser plugin seems to be their fallback excuse. If I wasn't so heavily invested in it I'd switch in a heartbeat. I need something that works across ios/mac/windows…

Hi, I work for AgileBits, makers of 1Password. I can't comment on the defensive part, but text can often be harder to parse in conversation so perhaps it was that? I generally find our support team to be pretty understanding but I am sorry if our support team didn't properly handle your concerns and feedback. Feature parity is a tricky one. The Mac (and since it's shared code in a lot of ways, the iOS app) have been…

Kyle, for what it's worth as a counterpoint, I've grumbled a couple of times about bugs and the 1P team has not come across as defensive at all to me.

Particularly after the nonsense support LastPass gives, it was a pleasant experience, even if my grumbles hold true.

It's not a perfect product by any means but still light years better than LastPass in usability.

Re: LastPass stores passwords so securely, not even its users can access them

#186

Earlier quoted context omitted.

Switched from LastPass to BitWarden over the weekend. I have 1,200+ passwords, and the transition was seamless. I even set up BitWarden on one of my web servers so that I can control my data -- even that took less than 30 minutes, thanks to BitWardenRS docker container. The only thing I have yet to figure out for BitWarden is how to get a little icon to show up next to user/password fields in forms. I just have to ri…

Is there an exporter available for BitWarden then? I'm guessing your 1,200 password had a seamless transition because of some tooling the project provides? Is that correct? Cheers.

Not the person you're asking but you can export your passwords to CSV from LastPass and BitWarden can import the CSV. The only issue is that the LastPass export can be a bit sketchy and have a few errors you need to manually fix.

Re: LastPass stores passwords so securely, not even its users can access them

#187
post #50

So in response to this story I decided to delete my (premium) account with them. After confirming multiple times (good thing), I was shown this error: https://i.imgur.com/4dpn6d5.png How does error handling like this even make it to production? I got an email as well confirming my account deletion and I can no longer log in. But all in all this clearly does increase my trust in Lastpass's security competence.

I got that same error when killing off my account after moving to Bitwarden. It really made me laugh as it encapsulated everything wrong with the service in a succinct error message.

Re: LastPass stores passwords so securely, not even its users can access them

#188

The article went up an hour and a half ago, at the exact same time as https://status.lastpass.com/ updated to say they were investigating. In under an hour, they acknowledged, identified, fixed, and verified the issue. The fix went out less than half an hour after they learned about it, and this HN submission was posted 1 hour ago, so no one learning of the issue by means of this HN submission will have been able to…

Life is so good that we are re-using brain structures evolved to avoid being eaten by lions to complain about buggy software.

Nowdays its more probable that one dies because of buggy software (Boeing MCAS) than get eaten by lions.

Re: LastPass stores passwords so securely, not even its users can access them

#189
post #7

So glad I switched to 1Password, haven't had an issue since. They provide an easy transfer of your passwords from LastPass, you can just follow their guide and be done in 5 minutes: https://support.1password.com/import-lastpass/

I was a longtime LastPass customer, but the service just kept getting worse and worse, to the point where a year ago I realized I was spending more time fighting the user interface than it was saving me. And their support was absolutely useless. So I also switched over to 1Password, and never looked back. It is such a refreshing and trouble free experience compared to LP, and the few times I needed to ask a question,…

Long time Lastpass user here - good god their UI is terrible. It really feels like a first pass to get the functionality working and then they just gave up. Kept up hope for the last like 5 years that it would get better. I should probably just start looking at alternatives at this point. Only reason I haven't is that my vault is a mess and I'm not looking forward to organizing when I finally move it.

Re: LastPass stores passwords so securely, not even its users can access them

#190
post #155

Earlier quoted context omitted.

I was a longtime LastPass customer, but the service just kept getting worse and worse, to the point where a year ago I realized I was spending more time fighting the user interface than it was saving me. And their support was absolutely useless. So I also switched over to 1Password, and never looked back. It is such a refreshing and trouble free experience compared to LP, and the few times I needed to ask a question,…

I've never used LastPass, why do people use it (or other password managers) instead of the built in browser password manager?

I use multiple browsers, and store credentials for things other than websites.
Post reply on HN