LastPass: Notice of Recent Security Incident

Re:LastPass: Notice of Recent Security Incident by Beltalowda on Thursday December 22, 2022 @09:44PM (#34101792)

> Getting a sneak peek of how the sausage is made gave me the hibbie jibbies and I switched to 1Password there and then

The big question with this is of course if 1Password's sausage is made any better.

[ Parent | on HN ]

Re:LastPass: Notice of Recent Security Incident by berniedurfee on Thursday December 22, 2022 @11:12PM (#34102261)

I hope 1Password is watching this closely and can learn from mistakes made by LastPass.

[ Parent | on HN ]

Re:LastPass: Notice of Recent Security Incident by mhss on Friday December 23, 2022 @02:00AM (#34103015)

Yeah I thought the same. I don't think 1Password is immune to security issues. However, after seeing several things I did not like in LastPass development, I decided 1Password was the safer bet. Knock on wood, they claim they've never been hacked and I hope it stays that way.

[ Parent | on HN ]

Re:LastPass: Notice of Recent Security Incident by acdha on Friday December 23, 2022 @09:06AM (#34105916)

They haven’t had the history of security problems that LastPass has had, and they’ve taken steps to handle this kind of situation by including an extra per-user key to stymie password guessing if someone does get the vaults:

https://support.1password.com/secret-key/

I stopped using them when they switched to subscription-only but I think it’s in their favor that they have planned for a nightmare scenario rather than assuming it won’t happen.

[ Parent | on HN ]