171–180 of 428 posts
[1] it doesn't matter scerets are technically encrypted. the threat-model for managing and storing secrets is different. I also don't want people to guess how they were created, when they were last modified, where they will be used, what other devices use them etc.
Earlier quoted context omitted.
How does it compare with 1Password?
All password managers have issues but as a user of 1Password I have a lot of gripes with the product: - Fails to fill out passwords around 2% of the time (Firefox account for example) - Sometimes I mash the "CMD+/" shortcut and nothing happens. It's very unstable. - Password generator is rigid. I have to edit the generated password about 90% of the time to add capital letters, numbers etc. I made a comment a while ba…
Some systems are already using it -- e.g. I know that Apple's generate-password helper reads it, and I believe that 1Password also does.
Those of you looking for an alternative, consider moving your data to a Keepass database. Its a more or less open file format, which a lot of different tools can read. My goto tool currently is Keeweb - https://keeweb.info/ . Its basically a SPA, can be used offline or online. Keeweb + a google drive hosted keepass database file keeps my passwords available and synced across 5-6 different devices.
On iOS I switched to KeePassium[1] for my database a while back and its very nice. It integrates with biometric unlock and iOS password management so I can get at easily from anywhere and it stays in sync with the stored database (via a self-hosted Seafile[2] instance) nicely.
The setup has served us (two users) well with few hiccups and good support for dealing with the rare conflicts that do arise.
[0] https://keepassxc.org/ [1] https://keepassium.com/ [2] https://www.seafile.com/en/home/
switched to KeepassXC around 2 years ago when LastPass got bought. works great! there is no company that tries to brainwash me into thinking moving secrets[1] over a network is a a good strategy for managing them. [1] it doesn't matter scerets are technically encrypted. the threat-model for managing and storing secrets is different. I also don't want people to guess how they were created, when they were last modified…
Well, time to switch it is. I can't justify more than a couple of dollars a year for a password manager. Also artificial limits, especially when companies limit existing features like this piss me off ( cough google photos cough ). Why not add new features and make them premium only? Plus I recently changed my Lastpass password and they had added symbol/number requirements since the last time I had changed the passwo…
> Also artificial limits, especially when companies limit existing features like this piss me off (cough google photos cough). On the one hand, I tend to agree that changning existing features to paid is not-great (disclaimer, I was paying for Google Photos/One/Whatever even before they announced the changes), I wouldn't call space limits "artificial"
But for google, I believe the issue was people were abusing it. The proper solution would have been to stop the abuse, not what they did. Or for example, they might have removed unlimited video uploads which would make more sense, or had soft limits. Also you can't tell me google did not foresee this happening, which just tells me they used the free storage as a lure.
I'm all in for paying for services that handle your personal data. If you don't pay them, how do they make money? So I'm okay with this. Something to consider, however, is the alternatives. Bitwarden seems cheaper[0]. Anyone has a preference for either? [0] https://bitwarden.com/pricing/
This move to limit to a device type is shitty marketing trying to convert more people to buy.
It will fail by angering existing free users and pushing them to alternatives, while also reducing new users signup.
This is a sad post-acquisition state for a product, trying to make the most possible money out of it instead of focusing on real value.
I very happily pay $10/year for Bitwarden. It is in my opinion superior to Lastpass, and I don't have the doubts of the corporate governance.