This was what I was thinking, until three days ago someone mentioned here about Bitwarden. It's perfect, no more LP for me, you should try it too :) https://bitwarden.com/

I'm going to go ahead and second this - I switched a couple of days ago as well and my jaw just dropped at how much better it is than lastpass. The ui is better, the interface is snappy!, and it's gpl. I just wish I had learned about this earlier.

Why is it people never offer 1Password as an alternative? Sure, it's paid and slightly more expensive, but they have regular security audits and their apps on each platform are really well made and second to none. Their change logs are also always a pleasure to read, they even mention each bug by issue tracker number! Only problem is no Linux app.

Password managers are kind of a funny niche; the Venn diagram of people who use them, and power users, are probably more overlapping than most. I would venture that those (power) users want full cross-platform compatibility (Win, Mac, Linux, iOS, Android).

Additionally, it's probably not helping that their historical pricing model makes no sense for users who interact with many platforms on a daily basis. I didn't even know it had changed until I re-checked it after reading your comment.

Just my 2¢ as someone who previously considered 1Password once upon a time, and dismissed them. They may deserve a fresh look these days, but now they're competing against much more robust competitors than they were back in 2010(?).

I used (and paid for) LastPass and even convinced work to go with LastPass Enterprise. Then LogMeIn came along and bought them. Using an MBP as my primary machine at the time, I switched to 1Password (paying for the full version for my MBP, iPad, and iPhone) the very same day. Then, they pulled the ol' switcheroo and went to a subscription model.

That turned a lot of people off from 1Password.

Since my primary workstation and primary laptop now both run Arch Linux -- which 1Password has no desire to support (and don't even mention how shitty the Windows version runs under Wine) -- I'm back to where I was years ago, running KeePass/variants. I don't expect to switch to anything else for a long time -- my "secrets" are mine and only mine, once again.

For their own reasons.

If you like it, offer it.

It looks good. And I don't want to come off as dismissive, I am just genuinely wondering: How can I know they are trustworthy? Has it been recommended by any security or cryptography experts? This is the first time I am hearing about Bitwarden and not being a security expert, I don't know how I can ascertain their trustworthiness.

I'd love an answer to this as well.

Tangentially, this is a rare moment when I want a service to charge me money to assure myself that they are adequately incentivized to take my service/business seriously.

You can run the "cloud" side on your own hardware, a docker image is provided.

It looks very nice (I am trying it out right now) but how trustworthy is a free password management service?

The idea is to selfhost it – it’s open source.

I've been planning a switch to "pass" (passwordstore.org), mostly because I want to use my yubikey for encryption, ie. the GPG key...

But maybe I'll explore this.

After the most recent LastPass extension vulnerability, I no longer run LastPass extension in my default browser (Firefox). I have it installed on a different browser then copy/paste as needed.

More convenient to just disable auto-fill, which prevents the exploit.

Until the next one, then the next one, then the next one. I just figured at some point it's safer to trade a slight inconvenience of copy/paste to not have my passwords available via JavaScript.