LastPass users: Your info and vault data is now in hackers’ hands
1–10 of 20 posts
Re: LastPass users: Your info and vault data is now in hackers’ hands
#2This makes me wish 1Password still allowed self-hosted and self-synced password vaults.
Re: LastPass users: Your info and vault data is now in hackers’ hands
#3This makes me wish 1Password still allowed self-hosted and self-synced password vaults.
What password manager does?
Re: LastPass users: Your info and vault data is now in hackers’ hands
#4Re: LastPass users: Your info and vault data is now in hackers’ hands
#5This makes me wish 1Password still allowed self-hosted and self-synced password vaults.
What password manager does?
I believe Keypass uses local password vaults. I don't use it personally, but I have heard many people use a combination of KeePass and Syncthing to sync their passwords across multiple devices.
Example article: https://dev.to/rusty_sys_dev/switching-to-keepass-and-syncth...
I wouldn't recommend Keypass to my non-technical family and friends, but if you love the command line it might be what you are looking for
Re: LastPass users: Your info and vault data is now in hackers’ hands
#6Earlier quoted context omitted.
What password manager does?
Bitwarden offers both a hosted and self-hosting option. Though their code is open source unlike LastPass and 1Password.
It works great but you'll need a reverse proxy with TLS + a domain if you want to use the android app.
Self signed certs don't play nicely with the app.
Re: LastPass users: Your info and vault data is now in hackers’ hands
#7Earlier quoted context omitted.
Bitwarden offers both a hosted and self-hosting option. Though their code is open source unlike LastPass and 1Password.
It works great but you'll need a reverse proxy with TLS + a domain if you want to use the android app. Self signed certs don't play nicely with the app.
Setting up a reverse proxy + TLS is not that hard. Buying a domain + paying the 10€ per year license (If you go with the official server rather than vaultwarden) is still cheaper than paying for Lastpass / 1Password / Dashlane for the same time. As long as you are willing to maintain it that's pretty reasonable.
The only thing that makes me mad in bitwarden's official client is that you STILL can't remap your keys. I still have the old habbit of Ctrl+L from Keeweb to go to the search bar. On Bitwarden it locks your vault...
Re: LastPass users: Your info and vault data is now in hackers’ hands
#8This title is so manipulative and misleading. The attacker stole a mountain of AES encrypted blobs, so unless this threat actor has broken AES already, it'll probably be decades before they'll be able to peer into your secrets.
Re: LastPass users: Your info and vault data is now in hackers’ hands
#9This title is so manipulative and misleading. The attacker stole a mountain of AES encrypted blobs, so unless this threat actor has broken AES already, it'll probably be decades before they'll be able to peer into your secrets.
And "unencrypted data, such as website URLs" which really should be enumerated in full.
Re: LastPass users: Your info and vault data is now in hackers’ hands
#10This makes me wish 1Password still allowed self-hosted and self-synced password vaults.
A no-cloud password manager: https://www.pwsafe.org/
With a whole host of alternate, compatible, implementations:
https://www.pwsafe.org/relatedprojects.shtml
Allowing for self-hosting (and in a few instances, some 'syncing').