News for hackers. Stuff that matters.
Re:LastPass: Security done wrong by pwenzel on Thursday March 23, 2017 @01:53PM (#13942228)
If you're open to a paid option, 1Password for Teams/Families a good one. You can transfer from LastPass via CSV (https://support.1password.com/import-lastpass/).
Re:LastPass: Security done wrong by WhitneyLand on Thursday March 23, 2017 @01:58PM (#13942277)
I felt like they weren't above board previously with pricing. It wasn't fraud but IIRC prices got a big jump that was timed to be in combination with some kind of defacto mandatory upgrade. It had a bait and switch feel to it and at the time the family price across multiple devices seemed too high.
Re:LastPass: Security done wrong by xeromal on Thursday March 23, 2017 @02:01PM (#13942299)
I'm still on 4.* which was a 1 time fee. I never felt like I was forced to upgrade.
Re:LastPass: Security done wrong by WhitneyLand on Saturday March 25, 2017 @03:22PM (#13957134)
That's cool, but the problem is most software is not safe to use unless it's actively maintained and offering updates from at least a security perspective.

So I don't consider that a realistic approach for most people, especially for something as mission critical as password management.

Re:LastPass: Security done wrong by tripzilch on Sunday April 02, 2017 @10:41AM (#14017333)
You just can't really expect proprietary software to be actively maintained indefinitely for a one-time fee. Add to the financial (and ego-) incentives to downplay security issues, I really don't think people should consider anything but open source password managers.
Re:LastPass: Security done wrong by extra88 on Thursday March 23, 2017 @05:40PM (#13944618)
I bought 1Password for Mac and 1Password for iOS in 2013, have paid nothing since and use the current versions. I don't save passwords to their cloud (I use Dropbox, including sharing a vault with my spouse), maybe I would have to start paying a subscription for that.
Re:LastPass: Security done wrong by ciex on Thursday March 23, 2017 @03:16PM (#13943169)
So I just did this. Have to say that I really didn't feel comfortable with the unencrypted CSV data transfer. I made sure that time machine doesn't index it, but accessing this file in the time window needed to export/import seems like a prime attack vector to me.
Re:LastPass: Security done wrong by ryankask on Thursday March 23, 2017 @04:02PM (#13943680)
Are you using 1Password's cloud sync or the older Dropbox/iCloud/other method? (Really curious about all 1Password users in this thread)

I've read a lot of reviews but many predate 1Password's cloud option.

Re:LastPass: Security done wrong by tcpekin on Thursday March 23, 2017 @04:46PM (#13944092)
I use their cloud sync and love it. One of the few subscription services I pay for. I also use the browser extension, which others have pointed out might not be the best, but I think it's better than one to five universal easy to guess passwords I was using before. I have it on Windows, Mac and Android and it syncs seamlessly.
Re:LastPass: Security done wrong by casenjo on Thursday March 23, 2017 @05:23PM (#13944445)
Been using 1P since version 4 or so and syncing with Dropbox. It works really well and I'm quite satisfied with how quickly they resolve issues (especially security related ones)
Re:LastPass: Security done wrong by stephen123 on Thursday March 23, 2017 @01:58PM (#13942276)
I recently switched to 1pass, it's much better
Re:LastPass: Security done wrong by nvr219 on Thursday March 23, 2017 @03:41PM (#13943438)
I have 1password 4.6 and love it.