28 ms·
Huh. Gotta admit, I'm rather distressed by this, but I'm trying to think through it logically. * They still don't have access to my raw passwords. Everything's
by quaunaut 11y ago
Huh. Gotta admit, I'm rather distressed by this, but I'm trying to think through it logically.
* They still don't have access to my raw passwords. Everything's already encrypted before it gets to them, and they don't have the key. They just store the encrypted data.
* They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things.
* Then again, LastPass hasn't had the greatest user experience lately. A mixture of simply not doing the data entry on some sites, and having a poorly designed UI for mobile that feels like little more than an extension of the desktop experience(which doesn't work very smoothly on mobile- it needs to be rethought from the ground up) means that perhaps the new things LastPass could do with this funding would make it more usable.
But at its core, this is a security company to me. Probably the only one I pay for directly. I love change and expansion in so many other industries, but I suppose I'm just not used to it here- perhaps that gut response of "I want my security to be utterly solid because of how bad it could be if it goes wrong".
This isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior).
- danieldk 11y agoThis isn't quite a reason to jump ship for me yet, but I'll certainly be duplicating work to other services(which so far, I've found to be quite inferior). Did you try 1Password (which works with Dropbox, Wifi sync, etc.)? Not affiliated with them, just a happy customer.
- quaunaut 11y agoI tried it for all of a week in the past. It's the top one I'm looking at moving to, but honestly the reviews that have been done by users of both are lacking on information, so I don't know what I'm giving up.
- ge0 11y agoVery happy user of 1password here, features, UX and overall ethos of Agilebits are to be commended
- zakelfassi 11y ago+1 for 1password. Best password management software out there.
- Eva_Schweber 11y agoHi zakelfassi, My name is Eva Schweber and I work for AgileBits, the folks who make 1Password. Thank you so much for the endorsement. Way to make my day!
- Eva_Schweber 11y agoHi ge0, My name is Eva Schweber and I work for AgileBits, the folks who make 1Password. I just wanted to thank you for your kind words.
- cvburgess 11y agoSeconded, a really amazing UI and UX with security at the forefront. Not to mention the apps are updated often to take advantage of the latest iOS and OS X features (they support other platforms but I don't use those apps).
- jobu 11y agoIt's not clear what the "Pro Features" in-app purchase includes. Is this something that's required for true usability?
- Eva_Schweber 11y agoHi jobu, My name is Eva Schweber and I work for AgileBits, the folks who make 1Password. You do not need the iOS app's Pro Features for looking up or entering Logins. But you can read much more about what you do get for purchasing the Pro Features here: https://support.1password.com/guides/ios/pro-features.html https://support.1password.com/guides/ios/pro-features.html
- Isn0gud 11y ago70€ is quite expensive
- themartorana 11y agoFor the secure storage of hundreds of passwords that sit in front of insane amounts of personal information, with support for auto-filling on desktop and mobile, easy syncing, archive sharing, and more... It's really not that expensive for what you're trusting it with. Edit: not affiliated, but it has to be my #1 favorite application on any platform.
- Oletros 11y ago> For the secure storage of hundreds of passwords that sit in front of insane amounts of personal information, with support for auto-filling on desktop and mobile, easy syncing, archive sharing, and more... I have all those features plus a proper web extension for $12/year.
- Eva_Schweber 11y agoHi themartorana, My name is Eva Schweber and I work for AgileBits, the makers of 1Password. I just wanted to thank you for sharing your love of 1Password! We love our customers and with folks like you, is it any wonder why?
- donkeyd 11y agoWhat annoyed me and made me switch to Last pass is that once I had all their apps, they released new versions which I had to pay for, again.
- jsudhams 11y agoyes in US$ 12 vs 40+ dollar for single user
- falcolas 11y ago$12 a year vs. a one-time purchase. Just for clarification purposes.
- Gonzih 11y agoIs it usable on linux?
- kingosticks 11y agoAm I missing something or is there really not a linux client?
- CountSessine 11y agoNope - no Linux client. Lot's of customers asking for one, too. There's a javascript client you can use on Linux, but a nice native Linux client would be ideal.
- shlant 11y agoI actually did an evaluation of password storage services recently and chose LastPass over 1Password for a couple reasons: 1. 1Password is SUPER expensive for what it is. You really pay for the fact that it looks nice and integrates well with mac. 2. It has no enterprise level features (This is for my organization) such as user management, access logging and fine grained roles and sharing. 1Password might be good for an individual or a small team, but it's too simple for anything beyond that.
- paulcole 11y ago"You really pay for the fact that it looks nice and integrates well with mac." Aren't those exactly the kind of things I'd want to pay for-- rather than opting for a cheaper solution that doesn't have those features?
- tamedimp123 11y agoNo, you want to pay for quality encryption and data safety.
- krisdol 11y agoKeyword: "I". Personally I'd choose Keepass as it is OSS but we all have different priorities. Seems like LastPass has features targeted at enterprise customers and it's (unfortunately) rare that a large businesses makes purchasing decisions with a priority on UX.
- bad_user 11y agoFor me look & feel and usability are nice, but not if it doesn't correspond to my needs. I routinely use both a Ubuntu Linux laptop and a MacBook. Unfortunately 1Password does not support Linux. And while I do use Dropbox, I like having the flexibility of switching to Google Drive. Speaking of look & feel, on Android the 1Password interface is the ugly duckling that doesn't use material design. And back to price. At home I also have a Windows box that I sometimes use for media. My phone is an Android, but I also have an iPad. So 1Password would set me back $42 for OS X + Windows (includes the discount), about $7 for Android and another $7 for iOS. That would be $56 with the discount, or $84 without the discount. And that is expensive, I mean that's almost the price of an IntelliJ IDEA upgrade. It's not terrible, I mean it does provide value and the price is sort of justified. But careful on the wanting to pay for things, as that's not how the world works. Do you know what happens to the farmers that invested money in the latest tractors and the seeds with the highest yield? Most are near bankruptcy, choked by loans and surviving on government subsidies. Just saying, wanting to pay for things is a sign that you've got more money than ability to spend, which is cool, but life is surprising and things change.
- MkOmNom 11y agoGive okeylabs a look. Not out yet but for the future.
- saibalter 11y agoLooks like great future proofing. how do they deal with people who dont have an apple watch though?
- fsckin 11y agoCan't watch their demo video -- blocked because of copyright infringement. Whoops.
- Oletros 11y agoDoes it work with Linux, Windows or Android?
- MkOmNom 11y agoSeems like the alpha is only for Apple products, I read that their next step is to support Windows and Android
- Eva_Schweber 11y agoHi danieldk, My name is Eva Schweber and I work for AgileBits, the makers of 1Password. I just wanted to thank you for sharing your love of 1Password with the other folks on this thread!
- ntucker 11y agoYou guys might want to see if you can do a better job of publicizing the LastPass import. I googled for it and found some of your support forum threads where users had contributed scripts to do it, and I thought that was a bit iffy, so I resolved to deal with it later. I then saw another comment here that clued me in to the fact that LastPass has an 'export' feature that you guys can import from. 60 seconds later, it was done. I'm sure you're getting a lot of new users today. Good luck! :)
- Eva_Schweber 11y agoHi ntucker, My name is Eva Schweber and I work for AgileBits, the folks who make 1Password. That's a great suggestion, thank you. And thank also for the good wishes. It has certainly been a busy day!
- bognition 11y agoAny chance you guys are going to run a promotion?
- Eva_Schweber 11y agoHi bognition, Just to be clear who I am, I am repeating that I am Eva Schweber and I work for AgileBits, the folks who make 1Password. And to answer your question, yes. We have put all of our apps (including our in-app purchases) on sale for 40% off.
- bognition 11y agoNice! you just scored yourself another customer!
- jdc0589 11y ago1Password is the only password manager that has been polished, feature complete, and low-impact enough to get me to actually use it. I gladly paid for it. If only all mobile browsers has easy ways for 1Password to integrate...
- biturd 11y agoIt's gotten a lot better, have you used the iOS9 app yet? Or I would imagine the Android app, their latest update on iOS is pretty good. While you are still using their app and spinning up a browser inside it, it doesn't feel that way anymore, and this is coming from someone suffering the pains of using this on an iPhone 4S.
- wlesieutre 11y agoThe Android app is not particularly good, but it gets the job done. Much like the Windows client compared to Mac, it's clearly playing second fiddle. They're doing a new "Windows Modern" (or whatever it's called) version, I need to give that a try sometime.
- technion 11y agoCan you tell me about any experiences with 1Password and IE ? I've been a huge fan of the technical capabilities of Lastpass in general - I have many desktops and syncing generated passwords works great. But it's never been something I could push to my business customers because it's never worked reliably under IE[0][1][2]. When I've bought this up in other forums, I only get the "oh.. using IE is dumb" sort of response, which is completely unhelpful for your average business. But it's an attitude I've often wondered if Lastpass had, based on their regular release cycles being heavily skewed away from IE[3]. 0,1 and 2 are easily replicated in my environments: [0] https://forums.lastpass.com/viewtopic.php?f=12&t=124495&start=10 https://forums.lastpass.com/viewtopic.php?f=12&t=124495&star... [1] https://forums.lastpass.com/viewtopic.php?f=12&t=159855 https://forums.lastpass.com/viewtopic.php?f=12&t=159855 [2] https://forums.lastpass.com/viewtopic.php?f=14&t=162395 https://forums.lastpass.com/viewtopic.php?f=14&t=162395 [3] https://lastpass.com/upgrade.php?fromwebsite=1&releasenotes=1 https://lastpass.com/upgrade.php?fromwebsite=1&releasenotes=...
- pinkano 11y agoNope, they are too pricey and their Windows version is not that smooth like competitors. I'm using Sticky Password - http://www.stickypassword.com http://www.stickypassword.com
- john_b 11y ago> "They however do control access to the account. This means there's a point where they get all sorts of data on me, and while I personally don't mind, I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things." I've never really understood the appeal of account-based password managers. It was a startup and it needed a business model, sure, so from the company's perspective it makes sense. But from a customer's perspective you're accepting a new type of risk that you don't have to worry about if you use a glorified encrypted list (e.g. KeePass) to manage passwords. The payoff is convenience, but personally no amount of convenience is enough to make me comfortable with storing all of my encrypted passwords on a single server somewhere and hoping that there are no exploitable security vulnerabilities (or malicious insiders who might seek to profit from finding or introducing them). Having an offline password manager that never uploads data to a server provides defense in depth, though it's less convenient.
- scrollaway 11y agoAgreed. Logically, something like KeepassX (https://www.keepassx.org/ https://www.keepassx.org/) is the most logical, secure choice. I think a lot of people pick Lastpass and such for the convenience of browser integration, but I don't think that's necessarily impossible with keepassx - just so happens that nobody is really working on it (which is a shame).
- mistersquid 11y agoAnother reason to use LastPass is if you need to share sensitive data with a team. Group credentials and secure keys for production environments, among other things, can be shared using LastPass.
- jtheory 11y agoThis one in particular -- I use KeePass for my personal stuff, still; but at work, there seem to be a ton of logins we need to share. Never mind sensitive stuff -- we get lots of use out of LastPass for managing the list of test and demo users on our site. We setup sandbox accounts (with various types of users) for potential customers. Each time the main logins to into LastPass, so if they run into problems, anyone on the dev team can help them out (with no other coordination required). I've not been terribly impressed by LP's usability, honestly; but for quite a while they've seemed to be the only mature product in this space. I've noticed Dashlane seems to be catching up here; I'm keeping an eye on them.
- bad_user 11y agoLastPass has a web interface, is also available as a browser plugin and when I tried it the only password they asked for was my account password. So how come they don't have your raw passwords? Because of their web centric approach, I doubt that they are encrypting it locally. And regardless, LastPass is a proprietary thing, so you can consider your passwords to be compromised anyway.
- quaunaut 11y agoThey are encrypting it locally. It isn't anything to doubt- it's been shown time and time again. Nowhere in the payload that gets sent to them is your key. The only way you could consider your passwords compromised is if you think there's already a rainbow table out there to decrypt everything, which is ludicrous.
- derobert 11y agoThere is an official, open-source lastpass CLI client: https://github.com/lastpass/lastpass-cli https://github.com/lastpass/lastpass-cli
- gnopgnip 11y agoI have problems with the mobile also but there is nothing else that compares. Android has the standalone app and the integrated keyboard. Autofill with the keyboard doesn't work like the web browser, but you can still copy and past the individual fields. Is there anything else that has a good standalone mobile app, and has good keyboard integration?
- briHass 11y ago> They still don't have access to my raw passwords. > They however do control access to the account. From point 2, point 1 is trivial to change. All they would need to do is update the extension or add some javascript (for the web login) to grab your master password in the clear. Sure, a local password manager like Keepass could provide a new version that posted my p/w, key file, and DB up to a server somewhere, but I would have to manually install it, and it would have to get around a local program executable-firewall. No such challenges with auto-updating extensions and/or JS served from their server (or MITM.) I don't know if the acquisition makes them more secure or less, but having worked at large companies, I tend to agree with: > I must admit I felt a bit safer when I thought it was a smaller, purpose-built company managing things.
- deleted 11y ago[deleted]
- sqldba 11y agoWhat about KeePass? There's even a web front end. Though really in an organisation you'd probably pay for one of those other solutions (Secret Server?)