News for hackers. Stuff that matters.

A comment on LastPass appears to be holding users' passwords hostage. Parent comment

Re:LastPass appears to be holding users' passwords hostage by riffic on Tuesday January 11, 2022 @02:08PM (#29896187)
bitwarden seems to be the favorite so far - open source, self-hostable if needed, and pretty easy to use.

There's a free reimplementation of its server which also seems to be highly recommended:

https://github.com/dani-garcia/vaultwarden

[ Parent | on HN ]
Re:LastPass appears to be holding users' passwords hostage by impalallama on Tuesday January 11, 2022 @02:12PM (#29896241)
Second Bitwarden, I moved from Lastpass to it last year and the process was painless. iOS and Browser support were at a parity that I just uninstalled one installed the other and was ready to go.
[ Parent | on HN ]
Re:LastPass appears to be holding users' passwords hostage by mattwad on Tuesday January 11, 2022 @02:19PM (#29896365)
Been using bitwarden and love it! I don't think it offers 2-factor but you can replace that with Authy or Google Authenticator
[ Parent | on HN ]
Re:LastPass appears to be holding users' passwords hostage by lstmemery on Tuesday January 11, 2022 @05:51PM (#29899515)
I'd like to recommend Aegis Authenticator, which is FOSS. It also encrypts tokens at rest, has password protection and the ability to export tokens.

Lastpass Authenticator does not do that, so I spent an hour yesterday manually resetting all my 2FA.

[ Parent | on HN ]
Re:LastPass appears to be holding users' passwords hostage by sliken on Tuesday January 11, 2022 @05:59PM (#29899611)
Vault warden (the recently renamed bitwarden compatible implementation in rust) supports 2fa as well. The providers mentioned are Auth/Google Auth, Yubico, Duoa, WebAuthn, and email.
[ Parent | on HN ]
Re:LastPass appears to be holding users' passwords hostage by karmanyaahm on Tuesday January 11, 2022 @03:12PM (#29897156)
It does have 2-factor in the paid plan.
[ Parent | on HN ]