The only good alternative everyone seems to agree on is Keepass. Keepass is useless if you need something that works in a group of people, especially across dif

The only good alternative everyone seems to agree on is Keepass. Keepass is useless if you need something that works in a group of people, especially across different devices. I can't speak to the vulnerabilities in 1Password but the reason we decided against 1Password is that the user experience for LastPass (Teams) is much better. There's no point in having a secure tool without compliance and bad UX is a show-stopper. Also the vulnerabilities so far have been mostly non-concerning: 1. The vulnerabilities of the browser extensions generally require the user to access malicious URLs, so they still require some degree of interaction. 2. The actual hacks of LastPass didn't result in any passwords or confidential information being leaked, so they're not very interesting. That 1Password hasn't seen similar disclosures doesn't mean 1Password doesn't have any vulnerabilities, nor that it didn't have them in the past. No software is without faults and so far LastPass has always reacted promptly. That 1Password doesn't have as many recent disclosures may simply mean that Tavis hasn't gotten around to looking at it yet.