News for hackers. Stuff that matters.
Re:Changes to LastPass Free by JumpCrisscross on Tuesday February 16, 2021 @10:08AM (#26154514)
How does it compare with 1Password?
Re:Changes to LastPass Free by dsissitka on Tuesday February 16, 2021 @10:29AM (#26154746)
I think Bitwarden's UX is pretty poor. A few examples off the top of my head:

- 1Password's TOTP support is much better. 1Password autofills the code and the password, Bitwarden only copies the code. 1Password will scan pages for QR codes.

- They finally implemented encrypted backups but they half-assed it. From https://bitwarden.com/help/article/encrypted-export/:

> Warning

> Rotating your account’s encryption key will render an Encrypted Export impossible to decrypt. If you rotate your account encryption key, replace the old backup with one that uses the new encryption key.

- https://news.ycombinator.com/item?id=25868856

That said, I'm a Bitwarden user because I don't it's that bad and I don't think 1Password is worth 3.6 times as much.

Re:Changes to LastPass Free by digianarchist on Tuesday February 16, 2021 @11:12AM (#26155283)
All password managers have issues but as a user of 1Password I have a lot of gripes with the product:

- Fails to fill out passwords around 2% of the time (Firefox account for example)

- Sometimes I mash the "CMD+/" shortcut and nothing happens. It's very unstable.

- Password generator is rigid. I have to edit the generated password about 90% of the time to add capital letters, numbers etc. I made a comment a while back on how we should be using HTML data attrs on the password field to hint how a password should look for password generators. Perfect password every time.

- Can't remove a single item from the trash. It's empty all or nothing.

- The shift to the web. Introduction of Keepass X extension whilst supporting the legacy. No feature parity between them. It's a bit of a mess to be honest.

Re:Changes to LastPass Free by kemayo on Tuesday February 16, 2021 @11:22AM (#26155440)
Re the generator, there's the passwordrules proposal: https://github.com/whatwg/html/issues/3518

Some systems are already using it -- e.g. I know that Apple's generate-password helper reads it, and I believe that 1Password also does.

Re:Changes to LastPass Free by digianarchist on Tuesday February 16, 2021 @02:42PM (#26157865)
This is exactly what I was thinking. I knew the idea was too good to be mine.
Re:Changes to LastPass Free by tschwimmer on Tuesday February 16, 2021 @11:44AM (#26155795)
Man, that password attributes idea is very good. How does one go about proposing that to a standards committee or something?
Re:Changes to LastPass Free by neogodless on Tuesday February 16, 2021 @10:27AM (#26154729)
It's probably tough to find a thorough review where someone put basically all their passwords in different password management tools and lived with them for long enough to compare them. Then again, people have undertaken more arduous tasks before.

For a while, I had the horrible practice of using the same username and very simple password everywhere. Eventually my "one true password" became slightly more complex, but I still had some bad habits. I eventually started letting Chrome save all my passwords except for, of course, my Google one.

I switched to LastPass (free) for a while. (My memory of this is a bit fuzzy.) At some point I wanted to switch to something less, eh... corporate? So I got BitWarden. I really like the password generator, and use it exclusively now. (There was a web site I used to use for this, but of course this is much more convenient.)

It was a bit rocky in the earlier days. Integration with the browser on Android could sometimes be a little shaky. It's still not perfect, but I don't have good comparisons there. I use Firefox on Android, Windows and Linux. It works really well on the desktop and mostly really well on Android, though with the browser it's unreliable if you rely on the Android app, so I install the Firefox Add-On for BitWarden, and that works reliably.

My spouse set up her own account, and we share some of our important passwords via a free organization. This is a great feature and gives us both some peace of mind if we were ever required to get into each other's accounts. We also paid the $10/year so she could see reports on her passwords, and get rid of breached, insecure and duplicate passwords. She has adapted readily to using the password manager though she mostly just uses it on the computer, not on the phone.

Overall we are very happy with it and I believe it's an excellent option. I cannot, however, compare it to 1Password.

Re:Changes to LastPass Free by munchbunny on Tuesday February 16, 2021 @12:12PM (#26156130)
Unless you have strong opinions about either one's UX, the most significant difference that matters to most users between Bitwarden and 1Password is that Bitwarden has a free plan and 1Password doesn't. Sometimes the "free" price tag is the difference between being able to convince someone (or yourself) to use a password manager and not being able to convince them.

About UX: between BitWarden and 1Password, I haven't seen any actually compelling discussion of the two password managers' UX that goes beyond just the typical way in which anonymous internet commenters enthusiastically assert preferences. They both do their jobs well enough the vast majority of the time. If you're genuinely in doubt about the UX, try Bitwarden for free and then try 1Password if you can't stand Bitwarden's UX.

Re:Changes to LastPass Free by syntheticnature on Tuesday February 16, 2021 @10:30AM (#26154756)
I'm sure it's not a perfect comparison, but the Wirecutter does have a comparison on their password manager page:

https://www.nytimes.com/wirecutter/reviews/best-password-man...

Re:Changes to LastPass Free by tunesmith on Tuesday February 16, 2021 @04:52PM (#26159237)
Bitwarden doesn't have a Safari extension anymore since Safari's extensions are their own format... Safari since said they'd allow Chrome's extension api but I haven't heard if Bitwarden will start developing the Safari extension again.
Re:Changes to LastPass Free by _coveredInBees on Tuesday February 16, 2021 @10:10PM (#26162177)
That's not true. If you install it from the Mac App store, you do then get the extension and can activate it within Safari. I just switched from LastPass to Bitwarden and by all accounts it seems better than LastPass (for my basic usage) and the Safari extension is working fine for me.
Re:Changes to LastPass Free by tunesmith on Friday February 19, 2021 @04:10PM (#26198069)
Thanks for this, by the way. There was a time where the author had announced that he wouldn't be supporting the Safari extension for Catalina and beyond, and I never realized it came back. My work life is better now ;)