News for hackers. Stuff that matters.
Re:LastPass appears to be holding users' passwords hostage by gilbetron on Tuesday January 11, 2022 @02:05PM (#29896132)
As a LastPass user, I'm getting a bit nervous. I've looked through various other threads on suggestions, but, since it is inevitable - what do people recommend and why? I'd prefer only answers from people that have been using their solution for at least a couple of years, and even better, people that have been using theirs for even longer and through multiple iterations of "weird things happened to password manager X" cycles :)
Re:LastPass appears to be holding users' passwords hostage by cianmm on Tuesday January 11, 2022 @02:17PM (#29896331)
I've been on 1Password for many many years - looks like I bought it first in 2008, and I've bought every major version since, and then moved to subscription within weeks of it launching. I couldn't be happier with the product, or their customer support. $3 per month for bulletproof password management that integrates so well into iOS and Mac OS isn't even something I think about when renewal time comes along. I'm watching their move to Electron for their apps with caution, but they have such a long track record of shipping great product that I'm not too worried.
Re:LastPass appears to be holding users' passwords hostage by iudqnolq on Tuesday January 11, 2022 @02:28PM (#29896506)
I don't love electron, but I do like they now have a Linux client with good platform integration (such as pop up mini window).

They previously had a cli for Linux. It was designed to provide everything you'd need to build a nice ui but since it was a little low-level it didn't have great ux.

Re:LastPass appears to be holding users' passwords hostage by cycomanic on Tuesday January 11, 2022 @02:23PM (#29896443)
I'm using keepassxc, synchronized over pcloud (but Box, Dropbox, gdrive etc would all work just as well). There's an excellent browser plugin, I use keepass2android on my phone and it also functions as my ssh-agent and I use it as my secret-provider for my Linux desktop (essentially a replacement for gnome keyring or kwallet). I'm not sure what reason there would be to use a SAAS.
Re:LastPass appears to be holding users' passwords hostage by tailspin2019 on Tuesday January 11, 2022 @02:12PM (#29896239)
I’ve used 1Password for around 8 years (maybe longer) and I believe them to be a pretty safe bet currently.

I wasn’t a huge fan of their move to a hosted model but I went with it and even so, I have to say that their service is good, reliable and instilling of confidence.

If I was starting from scratch I’d probably look more closely at Bitwarden (likely to use their hosted service but knowing I have the option later to self-host).

I would suggest that most people would likely be served well by either of these solutions at this point in time.

Re:LastPass appears to be holding users' passwords hostage by pkulak on Tuesday January 11, 2022 @03:17PM (#29897210)
Same here. If I was starting from scratch, I'd consider Bitwarden, but 1Password has been so flawless for me over the decade and a half I've used it (off and on) that I can only lose by moving.
Re:LastPass appears to be holding users' passwords hostage by jspash on Tuesday January 11, 2022 @05:07PM (#29898788)
I've used 1PW since it's inception, happily moving whichever way they went. However, the latest iteration (electron?) is an absolute mess. I blinkin hate it! Shortcuts work, then they don't. Search rarely works. Multiple overlapping modals appear. Modals position themselves over the input boxes. It's really awful after the change. Sadly I didn't find this out until I had already paid for the monthly subscription or I would have dropped it like a hot potato. I'll stick it out for a few months more, but if things don't improve I'll be in the market for something (anything) better.
Re:LastPass appears to be holding users' passwords hostage by foxfluff on Tuesday January 11, 2022 @02:28PM (#29896518)
I've been using pen & paper for a decade. So far it has not been affected by any CVEs, company acquisitions, bugs, quirky updates, outages, mandatory subscriptions or arbitrary account limits, leaks, or other compromises. It's airgapped and works fully offline too. Even if all my computing devices got filled with malware, they would only log the passwords that I actually type in.
Re:LastPass appears to be holding users' passwords hostage by pkulak on Tuesday January 11, 2022 @03:19PM (#29897242)
I could never trust credentials to my hand writing. :D
Re:LastPass appears to be holding users' passwords hostage by riffic on Tuesday January 11, 2022 @02:08PM (#29896187)
bitwarden seems to be the favorite so far - open source, self-hostable if needed, and pretty easy to use.

There's a free reimplementation of its server which also seems to be highly recommended:

https://github.com/dani-garcia/vaultwarden

Re:LastPass appears to be holding users' passwords hostage by impalallama on Tuesday January 11, 2022 @02:12PM (#29896241)
Second Bitwarden, I moved from Lastpass to it last year and the process was painless. iOS and Browser support were at a parity that I just uninstalled one installed the other and was ready to go.
Re:LastPass appears to be holding users' passwords hostage by mattwad on Tuesday January 11, 2022 @02:19PM (#29896365)
Been using bitwarden and love it! I don't think it offers 2-factor but you can replace that with Authy or Google Authenticator
Re:LastPass appears to be holding users' passwords hostage by lstmemery on Tuesday January 11, 2022 @05:51PM (#29899515)
I'd like to recommend Aegis Authenticator, which is FOSS. It also encrypts tokens at rest, has password protection and the ability to export tokens.

Lastpass Authenticator does not do that, so I spent an hour yesterday manually resetting all my 2FA.

Re:LastPass appears to be holding users' passwords hostage by sliken on Tuesday January 11, 2022 @05:59PM (#29899611)
Vault warden (the recently renamed bitwarden compatible implementation in rust) supports 2fa as well. The providers mentioned are Auth/Google Auth, Yubico, Duoa, WebAuthn, and email.
Re:LastPass appears to be holding users' passwords hostage by karmanyaahm on Tuesday January 11, 2022 @03:12PM (#29897156)
It does have 2-factor in the paid plan.
Re:LastPass appears to be holding users' passwords hostage by nerdponx on Tuesday January 11, 2022 @02:21PM (#29896397)
I am having a great experience with KeepassXC and KeepassXC-browser. I sync my password database via Seafile, which is hosted by Your Secure Cloud. And I use Strongbox on iOS.
Re:LastPass appears to be holding users' passwords hostage by coderintherye on Tuesday January 11, 2022 @02:11PM (#29896232)
BitWarden. Have been using for 3+ years now (Prior used LastPass).

BitWarden:

* Open-Source

* Affordable pricing

* Good, working browser extensions and desktop app

Re:LastPass appears to be holding users' passwords hostage by slock83 on Tuesday January 11, 2022 @04:43PM (#29898429)
I used LastPass for a while too, but I then switched to KeePass, using syncthings to have a single db. At first that was great, but after a few save mistakes, and a slight change in need, I've switched to a hosted bitwarden (using vaultwarden).

I've not had a single issue with it since, it's fully compatible with the official bitwarden app (which works rather well), and is much easier to use when other people in your household also need to manage their passwords.

Point of note : the android app syncs the database locally, and can be accessed/used/exported even offline, which is very, very reassuring in case of server/network failure

Re:LastPass appears to be holding users' passwords hostage by codazoda on Tuesday January 11, 2022 @02:20PM (#29896385)
I use KeyPass and then several different UI’s, based on the platform. I store the KeyPass in my favorite cloud drive so I can use it from wherever.
Re:LastPass appears to be holding users' passwords hostage by wintermutestwin on Tuesday January 11, 2022 @03:04PM (#29897047)
Where do you store the password for your "favorite cloud drive?"
Re:LastPass appears to be holding users' passwords hostage by Lukineus on Tuesday January 11, 2022 @04:44PM (#29898442)
Same, but I switched a while ago to using Syncthing for the database instead of cloud storage.
Re:LastPass appears to be holding users' passwords hostage by yumaikas on Tuesday January 11, 2022 @05:44PM (#29899398)
If you're going to be paying a subscription anyway, I've been using 1Password for 2.5ish years pretty successfully.

It's also recommended by Troy Hunt, who has a reputation at stake in all of this, since he runs stuff like https://haveibeenpwned.com

Re:LastPass appears to be holding users' passwords hostage by the_printer on Tuesday January 11, 2022 @04:05PM (#29897866)
Former LastPass user (2+ years) and current 1Password user (2+ years).

There’s no looking back. LastPass was buggy and the UI ugly. That was fine when it was free but when they went to fee based for cross platform support we switched the whole family over to LastPass. Everything works, is pleasant to use, and no slimy tactics.

Re:LastPass appears to be holding users' passwords hostage by function_seven on Tuesday January 11, 2022 @02:18PM (#29896341)
Another vote for BitWarden. I used LastPass for many years, and jumped ship when they were acquired. I've been using Bitwarden for a few years now and really like it.

Importing from LastPass was easy.

Re:LastPass appears to be holding users' passwords hostage by moonshinefe on Tuesday January 11, 2022 @04:33PM (#29898290)
Exactly my experience as well