Re:LastPass: Security done wrong
by pwenzel on Thursday March 23, 2017 @01:53PM
(#13942228)
If you're open to a paid option, 1Password for Teams/Families a good one. You can transfer from LastPass via CSV (https://support.1password.com/import-lastpass/).
[ Parent
| on HN ]
Re:LastPass: Security done wrong
by WhitneyLand on Thursday March 23, 2017 @01:58PM
(#13942277)
I felt like they weren't above board previously with pricing. It wasn't fraud but IIRC prices got a big jump that was timed to be in combination with some kind of defacto mandatory upgrade. It had a bait and switch feel to it and at the time the family price across multiple devices seemed too high.
I'm still on 4.* which was a 1 time fee. I never felt like I was forced to upgrade.
Re:LastPass: Security done wrong
by WhitneyLand on Saturday March 25, 2017 @03:22PM
(#13957134)
That's cool, but the problem is most software is not safe to use unless it's actively maintained and offering updates from at least a security perspective.
So I don't consider that a realistic approach for most people, especially for something as mission critical as password management.
You just can't really expect proprietary software to be actively maintained indefinitely for a one-time fee. Add to the financial (and ego-) incentives to downplay security issues, I really don't think people should consider anything but open source password managers.
I bought 1Password for Mac and 1Password for iOS in 2013, have paid nothing since and use the current versions. I don't save passwords to their cloud (I use Dropbox, including sharing a vault with my spouse), maybe I would have to start paying a subscription for that.
So I just did this. Have to say that I really didn't feel comfortable with the unencrypted CSV data transfer. I made sure that time machine doesn't index it, but accessing this file in the time window needed to export/import seems like a prime attack vector to me.
Are you using 1Password's cloud sync or the older Dropbox/iCloud/other method? (Really curious about all 1Password users in this thread)
I've read a lot of reviews but many predate 1Password's cloud option.
I use their cloud sync and love it. One of the few subscription services I pay for. I also use the browser extension, which others have pointed out might not be the best, but I think it's better than one to five universal easy to guess passwords I was using before. I have it on Windows, Mac and Android and it syncs seamlessly.
Been using 1P since version 4 or so and syncing with Dropbox. It works really well and I'm quite satisfied with how quickly they resolve issues (especially security related ones)
Re:LastPass: Security done wrong
by stephen123 on Thursday March 23, 2017 @01:58PM
(#13942276)
I recently switched to 1pass, it's much better