Re:LastPass release fix for DOM manipulation vulnerability
by an_account_name on Saturday April 01, 2017 @04:46AM
(#14011226)
I recently switched. There's a LastPass import option, and it took about 20 minutes to get all my devices synced up. The cost of switching may not be so high, depending on how you use LastPass (if you use their Enterprise features, for example, it would be higher).
Re:LastPass release fix for DOM manipulation vulnerability
by kevin_thibedeau on Saturday April 01, 2017 @09:24AM
(#14011985)
> 10 different passwords I shared across 100 sites. This was terrible
That isn't terrible so long as the email linked to them has a unique, strong password. How many of those sites need the highest level of vigilance?
Before I switched to lastpass, I had maybe 10 different passwords I shared across 100 sites. This was terrible, and now that I use Lastpass, every password is unique. So I use Lastpass because its an incremental improvement.
Is 1Password an incremental improvement over lastpass? I'm not convinced. It might be a tiny bit more secure, but nowhere near the gain in security I had from 10 re-used passwords -> all unique randomly generated 20+ char passwords. The cost of switching is high and so it would have to be enough of an improvement to justify the switchover.