Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Changes to LastPass Free

blog.lastpass.com

Post reply on HN
Print view View original

81–90 of 428 posts

Re: Changes to LastPass Free

#81

Post by Crosseye_Jack »

encom wrote: post #44
Crosseye_Jack wrote: post #19

Earlier quoted context omitted.

Cheers for the info, I'll look into it. I'm not against paying for the service (I've used the hell out of LastPass) I just not a fan them pulling my use case from under me.

That will always be a risk, as long as you rely on cloud services. I started using Lastpass as well, but moved to Keepass as soon as they were eaten up by Logmein. I moved to Keepass and I keep the keyfile on OwnCloud. It works very well, and even better than Lastpass (at least as it was when I last used it). Keepass has actual desktop clients, so you don't have to use a janky web-app.

>That will always be a risk, as long as you rely on cloud services.

True, but it seems that Bitwarden offers the option to self host which could help mitigate that. However as a paying customer you have more of a leg to stand on if the company does try and pull the rug from under you.

As for LastPass, I rarely used the "WebApp Vault" (Only to copy my passwords for native apps on my desktop) and did it all via the context menu / LastPass button injected into the User/Password fields in the browser.

Their iOS app was very handy (As my local supermarket self scan app keeps logging me out) as for most app's it would offer autocomplete. So I'm going to be looking more into the mobile intergration then the Desktop intergration (as its far easier for me to C+P between things on Desktop then it is for me on Mobile.)

I am going to give KeePass a try but I've not settled on which system I will actually switch to yet.

Re: Changes to LastPass Free

#82

Post by AlexandrB »

jonpurdy wrote: post #30

I've been on 1Password since 2007. Unfortunately, software quality seems to have taken a nosedive since version 7 came out (disregarding the subscription issue). Random beachballs and slowdowns, annoying 2FA and duplicate password warnings, and decoupling of stored files from login entries. I have been considering a replacement but haven't found anything up to the ease of use and Mac/iOS integration of 1Password yet.

Yup. Since 7.7 my 1Password looks like this (https://imgur.com/a/Zz4WSdx) on my external screen, with the scaling of the background inexplicably broken. I also see other graphical glitches here and there. Meanwhile 1Password 7 for Windows every few months forgets that I registered it and I have to go find the license file (within 1Password!) again.

The paternalistic Watchtower "feature" is a whole other set of annoyances I wish I could disable.

Re: Changes to LastPass Free

#83

Post by gruez »

twic wrote: post #51
PeterisP wrote: post #34

Earlier quoted context omitted.

Don't use a service, use (Free) software and handle your personal data yourself. https://keepassxc.org/ is one option to do so.

What are the options for using KeePass on Android? Is there a way to get auto-filling in apps? How about in Firefox for Android?

either Keepass2Android or KeepassDX. They both have virtual keyboard support[1] and at least one of them has android auto-fill support.

[1] to use it you have to open/unlock the database, select the entry (although I think it's also possible to associate to android package ids so you don't have to do this), switch back to the app, change your keyboard to the keepass keyboard which will have buttons for entering user and password.

Re: Changes to LastPass Free

#84

Post by willyt »

jonpurdy wrote: post #30

I've been on 1Password since 2007. Unfortunately, software quality seems to have taken a nosedive since version 7 came out (disregarding the subscription issue). Random beachballs and slowdowns, annoying 2FA and duplicate password warnings, and decoupling of stored files from login entries. I have been considering a replacement but haven't found anything up to the ease of use and Mac/iOS integration of 1Password yet.

I dont like the new safari web extension that adds little in page pop-ups everywhere. When I enter my master password, how can I be sure that the pop-ups are coming from the 1-password web extension and not from the website or another extension? Is it sharing the DOM with the website? If not, how are they separated? I realise I don’t understand how web extensions work but even so I don’t see why these pop-ups couldn’t easily be imitated by the site I’m on and I feel that it’s just asking for trouble doing stuff like that. After a bit of googling I realised that its possible to turn off, so I have.

1password has been feature complete for years now, I think they are changing things for no reason at this point. Just charge me for an update when operating system upgrades break the software. Sounds harsh I know, but TBH I wouldn’t mind if apple added family sharing to passwords and finally finished sherlocking them.

Re: Changes to LastPass Free

#85

Post by pdimitar »

jonpurdy wrote: post #30

I've been on 1Password since 2007. Unfortunately, software quality seems to have taken a nosedive since version 7 came out (disregarding the subscription issue). Random beachballs and slowdowns, annoying 2FA and duplicate password warnings, and decoupling of stored files from login entries. I have been considering a replacement but haven't found anything up to the ease of use and Mac/iOS integration of 1Password yet.

Try Enpass? Only the mobile app is paid once, everything else is free. No subscriptions, too.

Re: Changes to LastPass Free

#86

Post by DeusExMachina »

Ecstatify wrote: post #59
chrisamiller wrote: post #16

LastPass costs $36 per year. Operating on the principle of being the customer and not the product, that seems very reasonable for a secure way to store and share the keys to my digital life. That said, it does make it a little bit harder for me to onboard my friends and family when they ask. One of the selling points has always been "Yes, you can use it on your phone and laptop" and "no, it doesn't cost anything".

It’s ridiculously expensive. I get Office 365 with 1TB of storage for €6 per month. Office is just as secure as lastpass. I bought Enpass(wouldn’t recommend as they moved to a subscription model) and store everything on OneDrive. Paying $3 per month to store tiny text files is crazy.

I often see comments like this one that misunderstand value for how something is achieved.

Value is decided by the market according to the utility of the service. I happily pay $22 per year for Pinboard to keep a few bookmarks with tags. That's also storing "tiny text files" but I could not care less. I could even implement something similar myself. And yet, I find the value it provides worth paying.

Another, more extreme example. I am part of a $5000 business program. Last week, I got a single piece of advice that I consider already paid for the entire program. The delivery was 20 minutes long. It was not even something original invented by the lecturer, but it can be found in some books. And again, I don't care. The value is in the impact, not in how the advice that was discovered or delivered.

Re: Changes to LastPass Free

#87

Post by mixedCase »

pdimitar wrote: post #78

Surprised that nobody here mentions Enpass. Its mobile app is paid, sure, but it's a one-time cost and it's using an AES-256 encrypted local sqlite3 DB that can be synchronized with several popular cloud storage options: Dropbox, OneDrive and any WebDAV server. So you have your credentials vault with you everywhere. Very happy user for years. No subscriptions, desktop app is free, you just pay for your iOS / Android…

Well, there are high quality FOSS KeePass clients for all platforms, like KeePassXC, Keepass2Android and Strongbox.

So paying for a password manager that requires syncing doesn't seem like an attractive option.

Re: Changes to LastPass Free

#89

Post by ricardojoaoreis »

pizza234 wrote: post #48
snowoutside wrote: post #6

Just switched to Bitwarden. Took me ~15 minutes to get the browser extension + app installed and to complete the migration using the export/import features.

I've performed the switch as well, however, a couple of things to consider about Bitwarden: - field detection is much poorer in Bitwarden (ie. it will fill both signup and login fields in some websites... including HN) - Bitwarden timeout doesn't survive browser restarts (at least, this was the last time I've tried it), making it difficult to use for people with a complex password and frequent browser closing/opening

I don't like using browser extensions for password managers (I read in the past these are usually the easier attacks, might not be true nowadays) and switched from LastPass to Bitwarden.

The feature I miss is that LastPass has a Mac MenuBar app which provided a global shortcut to search my wallet, for Bitwarden I always have to open the app.

Also, the iPhone app doesn't let you view attached images in the app, you have to first download them to the phone's storage.

Re: Changes to LastPass Free

#90

Post by Macha »

hoseja wrote: post #49

What's wrong with KeePass, besides low marketing budget?

1. No inbuilt syncs. Dealing with sync conflicts manually eventually gets frustrating.

2. No multiple URL support. I had to have three entries for roll20 to support their app.roll20.net, roll20.net and forum domains. These duplicated entries also make rotation a pain and reduces the value of duplicate password tests when migrating to a password manager approach initially.

3. Poor Android apps. Apps don't support auto fill, have a UI from the gingerbread era, don't sync well even given the above caveats, and the android file system permission tightening has made using a seperate unrelated app to do the sync more painful.

4. Lack of a standard for identifying apps. Do they use the URL field and put the store ID in there? Do they use a custom field to allow having app + website login use the same entry? Does your next mobile app use the same field or even support that field?

Post reply on HN