Live data from Hacker News

Changes to LastPass Free

blog.lastpass.com

221–230 of 428 posts

Re: Changes to LastPass Free

#222
post #55

I very happily pay $10/year for Bitwarden. It is in my opinion superior to Lastpass, and I don't have the doubts of the corporate governance.

I've tried really, _really_ hard to like Bitwarden. But I ran into 2 huge issues, that ended up being blockers for me: 1. Sharing is super-confusing. I was trying to organize things for my mom, as well for my wife and I. And you have to create these "organizations". And they makes things really confusing for a variety of reasons. They are a different pricing/SKU. And the UX around them is not good. It's not clear whe…

> and it comes up right away

I'd be a bit afraid of this. Secure key derivation takes time. Remember, you want to be able to defend against people with a few GPUs or the ability to configure a cheap FPGA at least and the ability to build custom ASICs or employ a GPU botnet at worst. Taking ~5 seconds to derive your key securely on your phone is a near inevitability.

Re: Changes to LastPass Free

#223
post #55

I very happily pay $10/year for Bitwarden. It is in my opinion superior to Lastpass, and I don't have the doubts of the corporate governance.

I've tried really, _really_ hard to like Bitwarden. But I ran into 2 huge issues, that ended up being blockers for me: 1. Sharing is super-confusing. I was trying to organize things for my mom, as well for my wife and I. And you have to create these "organizations". And they makes things really confusing for a variety of reasons. They are a different pricing/SKU. And the UX around them is not good. It's not clear whe…

re:2 - interesting. I've used bitwarden regularly over the last year or so across windows and mac laptops and iOS devices. I can't recall ever having a notable delay. I wonder what this implies about configuration.

Re: Changes to LastPass Free

#224

I moved to Bitwarden about a year ago when I got fed up with the terrible UI in Lastpass. Bitwarden isn't the pinnacle of UI either, but at least it's way cheaper. Been very happy with it.

How well does it work on iOS? I’ve been happy with how well LastPass integrates with iOS so far.

It works great on iOS. Full integration as you would expect, pops up at the top of the keyboard for app & website autofills. FaceID is also implemented to authenticate before opening your vault.

edit: One note about something that was bugging me for a while...items created on my computer sometimes wouldn't show up in the vault for immediate use. Painful when you sign up for a service using your computer and then try to immediately sign into it on your phone.

In the iOS app settings there is 'Swipe down to refresh' (or similar) - turn that ON. Not sure why it was off by default, but it totally fixes the issue. Just swipe down to refresh the vault and your new item appears.

Re: Changes to LastPass Free

#225

I moved to Bitwarden about a year ago when I got fed up with the terrible UI in Lastpass. Bitwarden isn't the pinnacle of UI either, but at least it's way cheaper. Been very happy with it.

How well does it work on iOS? I’ve been happy with how well LastPass integrates with iOS so far.

Integration is the same as LastPass, in my experience.

Re: Changes to LastPass Free

#226

Earlier quoted context omitted.

LastPass is a commodity. There are many free or open-source alternatives that are as reliable and as secure as LastPass that provide similar functionality. It's hard to justify even the small price for a commodity service unless you provide the best possible solution, and sometimes even that is not enough. I switched from LastPass premium that costed 15$ per year a few years ago to Bitwarden because LastPass could re…

The functionality is a commodity but what about the UX? MP3 players were fairly common when the iPod came out but the iPod crushed all the competition? Why because the UX was simply better. Without a doubt the password manager with the best UX is 1Password. Last year ago I got my tech-averse partner to set it up on her phone, the entire process took about 10 minutes and then it was done. She's never asked for me help…

Point and click or keyboard UX for this stuff is awful no matter how you slice it.

At most I want a prompt for my unlock password when the password manager sees I’m on a site or in an app it has a password for.

We still externalize way too much orthogonal effort on users.

One of the reasons I like 1pwd is their cli tool. I can put such a call to it in a script, authenticate and stop giving a crap about 1pwd

Re: Changes to LastPass Free

#227
LastPass was my first ever password manager and I used for it ~5 years. A few years ago, I got fed up with how sluggish it was (at least, at the time). So I switched over the Bitwarden. Unfortunately, the Bitwarden Safari extension for macOS had a bug where I had unlock my vault every time I wanted to use a credential and that got annoying.

Around the same time I started using Bitwarden, I started at a job with a corporate 1Password subscription for employees. 1Password's UX was so much better than Bitwarden that I switched my personal account over a few months into using 1Password for work.

1Password isn't perfect (e.g. auto-generated passwords can't be autofilled unless you manually convert it to be a 'Login'), but it's by far the best I've used.

Re: Changes to LastPass Free

#228
There are a lot of recommendations for bitwarden here. It’s open source, and popular, but their website suggests Linux support is middling at best. Their desktop app download page only has AppImage’s for x86, and non-auto-updated debs and rpms.

Does it run on ARM Linux? Is it packaged natively by most Linux distributions? Are the packages reasonably up to date?

Re: Changes to LastPass Free

#229
I do not see the sense in using a product for this. You can use a free local password manager (like keepas) and cron rsync the database file to some backup servers you control. Or regularly back it up to an air gapped medium if you're paranoid. The chances of someone being able to break the encryption if you have a strong password for the next 5-10 years is nil, and by then you should've changed your passwords.

Re: Changes to LastPass Free

#230
post #46

Earlier quoted context omitted.

Never again on Keepass. The dollar savings is not worth the hassle of it. You have to use a different client on every device because the official client is Windows only, and I’ve even experienced bugs a client I used that caused me to lose data entered into secure notes. And while a single page app client is nice, it’s not good for password managers. 1Password integrates with the iOS password management API and brows…

>Saving ~$10-50 a year on something as useful and vital as a password manager in order to “roll your own” is such a bad tradeoff. This. I find it really strange that tech-savvy folks---who almost certainly have thousands of dollars worth of equipment---would cheap out on a password manager. You want a password manager that's secure, reliable, well-maintained, and usable. And doubly so if you want your less tech-savvy…

And doubly so if you want your less tech-savvy family to get the benefits and conveniences of using a password manager.

Definitely agree with this. I might consider setting up Keepass for myself (though I actually just pay for 1Password), but my lay friends would bounce off the setup and maintenance work of rolling your own Keepass setup immediately, and then I'd be on the hook to help them troubleshoot. I'd rather just point them at Bitwarden or 1Password. It works well enough and has good enough support that they get an operational password manager with minimal hassle and I don't have to spend time supporting it. Sure, you don't control their clouds, and 1Password isn't open source, but even so it's a dramatic improvement on a lay user's account security.

Post reply on HN