Re:I worked at LastPass as an engineer. My 2 cents on the si...
by FatActor on Monday December 26, 2022 @04:11PM
(#34141928)
1pw really doesn't play nice with yubikeys. LP has no issues (i think it doesn't use WebAuth, which 1P does). 1P UI is nicer. LP is a bit clunky. Not being able to add notes/docs to 1P in the extension kinda stinks ... why can't they just open the vault like LP does. They seem to be very similar: they both crap all over login forms! I like the secret key thing now: it basically forces people to have big passwords. But I find it annoying because my passphrase is enormous to begin with, I don't want to have to fuss with managing another key. I think they are neck-and-neck from my security posture view.
Thanks, folks, I should have jsut RTFA'd I misunderstood secret key as a failsafe, it is not:
https://support.1password.com/secret-key-security/
I installed both LastPass and 1Password and they make my homegrown key storage system feel so awkward by comparison.