Live data from Hacker News

Changes to LastPass Free

blog.lastpass.com

281–290 of 428 posts

Re: Changes to LastPass Free

#281
post #55

I very happily pay $10/year for Bitwarden. It is in my opinion superior to Lastpass, and I don't have the doubts of the corporate governance.

Anyone have a thorough guide to migrating to bitwarden. I’ve tried and failed . I have notes , multiple logins per site , about 1000 credentials .

Hey! I had this issue too twice before when trying to switch. I tried again today, and it seems to have gone off flawlessly this time....

I think the issue before was w/ multi-line nodes and special characters.

For reference, I imported the data by pasting in the lastpass export rather than using the .csv import.

Good Luck!

Re: Changes to LastPass Free

#282
Before raising its prices (or changing its free features) LastPass should get an independent security audit of its infrastructure, applications and extensions. There is a lot of competition in password managers, and they have almost the same functionality. So if LastPass wants to charge more, it has to differentiate from the other password managers, and given the security aspect of its business an audit would be the way to go.

Re: Changes to LastPass Free

#283
post #277

Earlier quoted context omitted.

Pretty sure the 1Password linux app is also Electron. Bitwarden is fine, especially for $10/yr.

There's a CLI. I honestly just end up using the browser extension...

The link they provided was to the announcement about the app. The app is electron. the CLI is written in Go, so it should feel pretty CLI-like.

I refuse to even think of using 1Password X. It's a security nightmare waiting to happen.

Re: Changes to LastPass Free

#284

For those already paying for Dropbox, Dropbox Passwords is included and is pretty solid.

Does the autofill work well? I was considering trying it out, but, unlike 1Password and Lastpass, there are really no reviews of Dropbox Passwords anywhere.

I personally had no idea this existed and I pay for dropbox.

Re: Changes to LastPass Free

#285

Earlier quoted context omitted.

I tried 1Password, but there was a basic missing feature, you can't toggle reading the password. This was a deal breaker for me when I have a ~90 character password (I often mistype one specific key everytime). Bitwarden doesn't have this problem.

Why would you type a 90 character password instead of copy / paste or have the manager fill it in? Also why 90 characters when 2FA would be the safer option? Or half that is already infeasibly long to brute force? Also what do you mean 'reading the password', like via a screen reader? I mean that would be pretty bad for accessibility, but if you mean displaying the password, my version has buttons for it (regular inl…

I was not clear.

This is the password for the password manager (e.g. 1Password/ lastpass master password). The password to rule them all. It should be extra secure. I also have 2FA, but you must have heard of defense in depth.

Anyway, I want to be able to see the password and check for typos before entering it to unlock the vault. I don't want to retype the whole password in when I only mistyped 1 character.

When I say read, I don't mean screen reader. I mean read with my eyes, I didn't think this would be a sticking point.

Re: Changes to LastPass Free

#286

Earlier quoted context omitted.

I was going to reply "the problem with 1password is they have no Linux support," but it looks like Linux support actually got added late last year! (Or at least there's an open beta.) https://blog.1password.com/1password-for-linux-beta-is-now-o... Anyone used both 1password and Bitwarden? I'm using Bitwarden right now, but I dislike the fact that their desktop app is Electron based.

Keepass is another cross-platform option (open source), though the UI on non-windows environments is a bit... crap. Nontheless, it works, and it works well.

Use KeePassXC rather than the official client. Even on Windows, I found it preferable.

Re: Changes to LastPass Free

#287
post #277

Earlier quoted context omitted.

I was going to reply "the problem with 1password is they have no Linux support," but it looks like Linux support actually got added late last year! (Or at least there's an open beta.) https://blog.1password.com/1password-for-linux-beta-is-now-o... Anyone used both 1password and Bitwarden? I'm using Bitwarden right now, but I dislike the fact that their desktop app is Electron based.

Pretty sure the 1Password linux app is also Electron. Bitwarden is fine, especially for $10/yr.

[deleted]

Re: Changes to LastPass Free

#288

LastPass was my first ever password manager and I used for it ~5 years. A few years ago, I got fed up with how sluggish it was (at least, at the time). So I switched over the Bitwarden. Unfortunately, the Bitwarden Safari extension for macOS had a bug where I had unlock my vault every time I wanted to use a credential and that got annoying. Around the same time I started using Bitwarden, I started at a job with a cor…

I was going to reply "the problem with 1password is they have no Linux support," but it looks like Linux support actually got added late last year! (Or at least there's an open beta.) https://blog.1password.com/1password-for-linux-beta-is-now-o... Anyone used both 1password and Bitwarden? I'm using Bitwarden right now, but I dislike the fact that their desktop app is Electron based.

1Password's support is not that great on Linux. I couldn't get it working anywhere but on Ubuntu. On all other distros, the extension failed to find the running app.

Re: Changes to LastPass Free

#289
post #222

Earlier quoted context omitted.

I've tried really, _really_ hard to like Bitwarden. But I ran into 2 huge issues, that ended up being blockers for me: 1. Sharing is super-confusing. I was trying to organize things for my mom, as well for my wife and I. And you have to create these "organizations". And they makes things really confusing for a variety of reasons. They are a different pricing/SKU. And the UX around them is not good. It's not clear whe…

> and it comes up right away I'd be a bit afraid of this. Secure key derivation takes time. Remember, you want to be able to defend against people with a few GPUs or the ability to configure a cheap FPGA at least and the ability to build custom ASICs or employ a GPU botnet at worst. Taking ~5 seconds to derive your key securely on your phone is a near inevitability.

Searching happens after the vault is already unlocked.

Re: Changes to LastPass Free

#290

Earlier quoted context omitted.

Keepass is not a Web first app. There are extensions and workarounds but considering the nature of its file based database it can never be as smooth as solutions like bitwarden and others. At work we share a Keepass file on a nextcloud instance and it's a giant PITA.

::Personal Opinion Warning:: When it comes to security, smoothness is kinda low on my priority list. I'm fine swapping windows to copy/paste values, or pressing a hotkey.

There are notable advantages to browser integration - in particular not filling on spoofed "lookalike" domains made with visually similar Unicode characters, and not putting passwords into the clipboard where they might be snagged by anything watching the clipboard.

(admittedly, if your system has something malicious monitoring clipboard use you already have big problems)

Post reply on HN