News for hackers. Stuff that matters.

A comment on LastPass Security Notice. Parent comment

Re:LastPass Security Notice by gherkin0 on Monday June 15, 2015 @04:27PM (#9721856)
> For web services (like HN) I simply don't need to log in and comment that badly if I'm on an unusual device.

You also don't need to use one solution for every use-case. I use an online password manager (LastPass + 2FA) for relatively high-use, low-value credentials (things like web forums and online shopping sites). For higher-value credentials (investment accounts, banking, email), I use an offline password manager on trusted machines and site-specific 2FA when available.

That's been a good trade off between convenience and security for me.

[ Parent | on HN ]
Re:LastPass Security Notice by sahil_videology on Monday June 15, 2015 @06:06PM (#9722429)
Seconding multiple solutions. I use LastPass to deal with the volume of credentials required, storing most but not all sites. I memorize the most important sites (bank, primary e-mail), never putting them in a password manager.
[ Parent | on HN ]
Re:LastPass Security Notice by binaryanomaly on Monday June 15, 2015 @05:05PM (#9722116)
I think 2FA is really the key here. If I have a really physically isolated 2FA device I feel pretty safe actually.
[ Parent | on HN ]