Re:Should you be concerned about LastPass uploading your pas...
by dontbenebby on Friday April 05, 2019 @01:21PM
(#19584855)
>This strategy makes you more susceptible to phishing
One mitigation is to use Firefox account containers.
If I navigate to what claims to be Bank of America, but the tab doesn't open in my "Banking" container, that's a huge red flag.
Also, as another poster mentioned, Lastpass sometimes fails to autofill. Unless a manager can achieve 100% error free operation (unlikely), even autofill managers will also have a risk of phishing.
I don't think there's one correct answer. For me, as an expert who's confident about my security posture (2FA, verbal passwords for vendors that can reset 2FA, backup codes stored securely offsite), I value the simplicity of Keepass.
One mitigation is to use Firefox account containers.
If I navigate to what claims to be Bank of America, but the tab doesn't open in my "Banking" container, that's a huge red flag.
Also, as another poster mentioned, Lastpass sometimes fails to autofill. Unless a manager can achieve 100% error free operation (unlikely), even autofill managers will also have a risk of phishing.
I don't think there's one correct answer. For me, as an expert who's confident about my security posture (2FA, verbal passwords for vendors that can reset 2FA, backup codes stored securely offsite), I value the simplicity of Keepass.