News for hackers. Stuff that matters.
Re:LastPass stores passwords so securely, not even its users... by ars on Monday January 20, 2020 @03:41PM (#22101926)
I've never used LastPass, why do people use it (or other password managers) instead of the built in browser password manager?
Re:LastPass stores passwords so securely, not even its users... by ken on Monday January 20, 2020 @07:22PM (#22103220)
Every built-in browser password manager I've seen seems to be just a password-protected list of (URL, name, password) tuples. They're the most bare-bones possible implementation.

There's no (non-cloud) syncing, or easy backups. There's no file attachments, or custom fields, or non-website-based accounts. There's no automatic checking for duplicate passwords, or old passwords, or alerts for websites known to have been compromised.

I don't use a web-based password manager like LastPass because I don't really trust it (for either security or reliability), but local password managers are great for storing all kinds of private data. How would I store my driver's license, my storage unit lockbox combo, or my marrow donor registry ID in a web browser?

Re:LastPass stores passwords so securely, not even its users... by jacekm on Monday January 20, 2020 @05:20PM (#22102558)
Until not so long ago, the browsers' password storages provided absolutely zero security. They are better now, but still password managers offer some advantages. For me the most important is the ability to use multiple browsers. But there's other stuff: random password generator, ability to store custom key/value pairs, 2FA, etc.
Re:LastPass stores passwords so securely, not even its users... by ars on Monday January 20, 2020 @07:32PM (#22103265)
> provided absolutely zero security.

I've been encrypting my Firefox password store for so many years I can't even remember.

Is that not secure or something?

Re:LastPass stores passwords so securely, not even its users... by tylermenezes on Tuesday January 21, 2020 @12:32AM (#22104525)
Yes, actually. https://palant.de/2018/03/10/master-password-in-firefox-or-t...

(Maybe they've fixed this since, I'm not sure. It doesn't seem like security is being taken very seriously in any case.)

Re:LastPass stores passwords so securely, not even its users... by kevinmannix on Monday January 20, 2020 @04:20PM (#22102187)
Having a password manager on mobile is needed, so I need multi-device support. I was really happy with the password manager support the last iOS included. Password entry and persistence are streamlined.
Re:LastPass stores passwords so securely, not even its users... by Marsymars on Monday January 20, 2020 @05:54PM (#22102744)
I use multiple browsers, and store credentials for things other than websites.