LastPass: Security done wrong • Hacker News Board

Re: LastPass: Security done wrong

#21

Post by CGamesPlay » Thu, Mar 23, 2017, 5:35 PM UTC

karood wrote: post #17

I used it (1P) and it was super, but mac only - no Linux client. Just switched over to Enpass, and its very like 1Password, only they do provide a linux client. So far its great, very happy with it. * reply to comment above re 1Password

1Password is different from LastPass; the article is about the latter.

Re: LastPass: Security done wrong

#22

Post by draw_down » Thu, Mar 23, 2017, 5:35 PM UTC

I never liked it, but I won't pretend it's because I'm some security genius. Just found it very unpleasant to use

Re: LastPass: Security done wrong

#23

Post by johnjuuljensen » Thu, Mar 23, 2017, 5:35 PM UTC

http://keepass.info/ is awesome.

Put your keyfile on Dropbox/OneDrive/whatever so it syncs to all your computers.

Keepass2Android works great and can read from most cloud storage solutions.

Don't know about iPhone.

Edit: It also has a lot of neat plugins. I use one for storing ssl certificates, which also supports key forwarding to putty.

Re: LastPass: Security done wrong

#24

Post by draw_down » Thu, Mar 23, 2017, 5:36 PM UTC

Sealy wrote: post #3

Interested to hear what the HN community thinks about 1Password

I really like it. Much nicer to use than Lastpass in my opinion.

Re: LastPass: Security done wrong

#25

Post by 4ad » Thu, Mar 23, 2017, 5:37 PM UTC

I'm interested to hear what the HN community thinks about keeping passwords in iCloud-based Keychain (Safari) or whatever Google's alternative is called.

I don't care about portability. Why would I want e.g. 1Password instead of simply using Apple Keychain.

Thanks!

Re: LastPass: Security done wrong

#26

Post by dmd » Thu, Mar 23, 2017, 5:37 PM UTC

karood wrote: post #17

I used it (1P) and it was super, but mac only - no Linux client. Just switched over to Enpass, and its very like 1Password, only they do provide a linux client. So far its great, very happy with it. * reply to comment above re 1Password

This is about Lastpass, not 1Password.

Re: LastPass: Security done wrong

#27

Post by rahulrav » Thu, Mar 23, 2017, 5:37 PM UTC

abalone wrote: post #12

Sealy wrote: post #3

Interested to hear what the HN community thinks about 1Password

How about Enpass?

Uses SQL Cipher, which uses "Algorithms provided by the peer reviewed OpenSSL crypto library".

Given all the problems with OpenSSL, I really wished they used something like BoringSSL.

Re: LastPass: Security done wrong

#28

Post by karood » Thu, Mar 23, 2017, 5:37 PM UTC

CGamesPlay wrote: post #20

karood wrote: post #17

I used it (1P) and it was super, but mac only - no Linux client. Just switched over to Enpass, and its very like 1Password, only they do provide a linux client. So far its great, very happy with it. * reply to comment above re 1Password

1Password is different from LastPass; the article is about the latter.

Yip, misreplyed to a comment asking about 1Password

Re: LastPass: Security done wrong

#29

Post by izacus » Thu, Mar 23, 2017, 5:39 PM UTC

pseudobry wrote: post #9

gtirloni wrote: post #2

What to use instead that doesn't fall into the same situation and offers decent mobile/browser support?

I signed my family up for 1Password a month ago and love it so far. Here's the 1Password Security Design Whitepaper: https://1password.com/files/1Password%20for%20Teams%20White%...

1Password has no Linux support so it's not really a drop in replacement. Android autofill functionality is also significantly worse.

Re: LastPass: Security done wrong

#30

Post by mnutt » Thu, Mar 23, 2017, 5:40 PM UTC

monatron wrote: post #5

Sealy wrote: post #3

Interested to hear what the HN community thinks about 1Password

I used 1Password for quite a long time but have since switched to LastPass mostly due to Linux compatibility and u2f integration

I was really surprised that I was able to get 1Password for Windows working under Wine, even 1P Mini works with the browser extensions. It's not terribly reliable, though.