Re:PSA: LastPass Does Not Encrypt Everything in Your Vault
by fapjacks on Thursday January 19, 2017 @12:54PM
(#13437748)
Just to clarify: You're talking about Lastpass here? For myself, Lastpass has just been an absolutely terrible user experience, with many of the issues you're talking about. I have this obscure ritual I have to go through when generating new site passwords -- like generate one in a new tab, then go manually "add site" and input the information -- because Lastpass can't get it together.
Re:PSA: LastPass Does Not Encrypt Everything in Your Vault
by holtalanm on Thursday January 19, 2017 @01:01PM
(#13437830)
Thats exactly what I do for generating a new password.
LastPass always thinks I want to replace credentials for subdomain sites. all the time.
When I have a password saved for foo.com And then I try to save a password for bar.foo.com. LastPass, for all that is holy and good in the world, stop assuming I want to replace my password for foo.com damnit.
Re:PSA: LastPass Does Not Encrypt Everything in Your Vault
by scotu on Thursday January 19, 2017 @03:09PM
(#13439060)
maybe the ui is not great, but as far as I know you are asked every time (in a not very visible way that probably defaults on replacing the previous): if I'm not mistaken if you look at the very bottom of the save dialog/page there should be a dropdown that allows you to create a new entry
Re:PSA: LastPass Does Not Encrypt Everything in Your Vault
by akurilin on Thursday January 19, 2017 @01:01PM
(#13437834)
Yeah, LastPass. I sometimes copy and paste the auto-generated password just in case it loses it. I've had many occasions where it would flat out drop it after I save the site and now I have to immediately password reset because the password is nowhere to be found.
Re:PSA: LastPass Does Not Encrypt Everything in Your Vault
by fapjacks on Thursday January 19, 2017 @01:45PM
(#13438319)
Yeah, I have had the same experience. I always end up copying the generated password.
Re:PSA: LastPass Does Not Encrypt Everything in Your Vault
by mnm1 on Thursday January 19, 2017 @01:33PM
(#13438185)
This and the respondents' experiences below have been my experience too. If they can't get the basic UX right, I doubt they got the security right (they didn't: http://lifehacker.com/lastpass-hacked-time-to-change-your-ma...) and I'm not sticking around to find out. I switched to Enpass instead.
Can't even begin to count the # of times it lost a newly generated password, or it failed to swap the password for a website, or didn't immediately show a password I just created until I did a full refresh, or it has opaque rules about what can be shared with teammates. Would be great if they put more focus on getting the fundamentals right before expanding the feature set.