5 ms·

Nightly has been amazing. I’m just waiting on LastPass before I switch full time.

DiabloD3 9y ago
Switch to Bitwarden, already has a WebExtension extension. Lastpass is basically dead ever since LogMeIn proved they don't care about security of the vault.
- bluejekyll 9y ago
  Hmm. Yeah I’ve been wondering about lastpass for a little while now. Is there a comparison of these tools that you’d recommend?
  - DiabloD3 9y ago
    There is no good comparison website I'm aware of, but Bitwarden ticks every box Lastpass does, and is already working on ticking boxes Lastpass doesn't.
    - eradicatethots 9y ago
      Bitwarden doesn’t have support for credit cards/ addresses/ SSNs...
      - colemickens 9y ago
        Yes, it does. Source: I just switched hours ago and it imported my CCs from LastPass. You can see the stuff they're working on via their Twitter account too.
        deleted 9y ago
        [deleted]
- bonsai80 9y ago
  Thanks for mentioning Bitwarden. I didn't know about them, but I've had the same concerns about Laspass/Logmein. Yubikey functionality is important to me, which many alternatives don't have, but I see Bitwarden does have that. Their GPL v3 license on all of their software is nice to see too.
- Fnoord 9y ago
  Dead to me ever since they decided to raise the price with 100% for no reason (from consumer PoV) whatsoever. Classic bait & switch. Is there an easy way to convert your current Lastpass database to Bitwarden?
  - DiabloD3 9y ago
    Bitwarden can import Lastpass-made CSV exports (plus exports from literally everyone).
  - gervase 9y ago
    Yes: https://help.bitwarden.com/article/import-from-lastpass/ https://help.bitwarden.com/article/import-from-lastpass/
    - Fnoord 9y ago
      Thanks, both of you. Seems 2FA (YubiKey) costs 10 USD/year instead of 24 USD/year which LastPass costs. I've been looking for a recent feature comparison, the Wikipedia one is rather shallow and incomplete [1] [2]. My (incomplete) take on feature comparison: Both are relatively cross-platform, widely supported by what I consider status quo platforms (Windows, Linux, Android, macOS, iOS, Chrome, Firefox). Advantages of Bitwarden are open source and public development, approx half the price (and approx same as Lastpass before purchased by Logmein), and the ability to self-host. Advantages of Lastpass are different login for accessing to account and decrypting database. This is important because without this, a MITM attack gets access to the master password. I also found the announcement of Bitwarden, approx 1 year old now, on HN [3]. It includes some feedback about the software. Bitwarden uses AES256-CBC. How secure is AES256-CBC in this case, and what does Lastpass use? Another criticism is usage of Google Analytics. This can be disabled in the application, but I don't feel it serves a purpose for the user. It should never have been included in the first place. I also don't think either software is audited. [1] https://en.wikipedia.org/wiki/List_of_password_managers https://en.wikipedia.org/wiki/List_of_password_managers [2] https://en.wikipedia.org/wiki/Comparison_of_password_managers https://en.wikipedia.org/wiki/Comparison_of_password_manager... [3] https://news.ycombinator.com/item?id=12676979 https://news.ycombinator.com/item?id=12676979
- bluejekyll 9y ago
  I just switched... Thanks for the recommendation, it's excellent.
pimeys 9y ago
I'm a quite happy user of KeepPassXC as my password manager. I seriously dislike how LastPass stores the passwords on their servers. And KeepPassXC is open source and actively developed. https://keepassxc.org/ https://keepassxc.org/

Switch to Bitwarden, already has a WebExtension extension. Lastpass is basically dead ever since LogMeIn proved they don't care about security of the vault.

bluejekyll 9y ago
Hmm. Yeah I’ve been wondering about lastpass for a little while now. Is there a comparison of these tools that you’d recommend?
- DiabloD3 9y ago
  There is no good comparison website I'm aware of, but Bitwarden ticks every box Lastpass does, and is already working on ticking boxes Lastpass doesn't.
  - eradicatethots 9y ago
    Bitwarden doesn’t have support for credit cards/ addresses/ SSNs...
    - colemickens 9y ago
      Yes, it does. Source: I just switched hours ago and it imported my CCs from LastPass. You can see the stuff they're working on via their Twitter account too.
      - deleted 9y ago
        [deleted]
bonsai80 9y ago
Thanks for mentioning Bitwarden. I didn't know about them, but I've had the same concerns about Laspass/Logmein. Yubikey functionality is important to me, which many alternatives don't have, but I see Bitwarden does have that. Their GPL v3 license on all of their software is nice to see too.
Fnoord 9y ago
Dead to me ever since they decided to raise the price with 100% for no reason (from consumer PoV) whatsoever. Classic bait & switch. Is there an easy way to convert your current Lastpass database to Bitwarden?
- DiabloD3 9y ago
  Bitwarden can import Lastpass-made CSV exports (plus exports from literally everyone).
- gervase 9y ago
  Yes: https://help.bitwarden.com/article/import-from-lastpass/ https://help.bitwarden.com/article/import-from-lastpass/
  - Fnoord 9y ago
    Thanks, both of you. Seems 2FA (YubiKey) costs 10 USD/year instead of 24 USD/year which LastPass costs. I've been looking for a recent feature comparison, the Wikipedia one is rather shallow and incomplete [1] [2]. My (incomplete) take on feature comparison: Both are relatively cross-platform, widely supported by what I consider status quo platforms (Windows, Linux, Android, macOS, iOS, Chrome, Firefox). Advantages of Bitwarden are open source and public development, approx half the price (and approx same as Lastpass before purchased by Logmein), and the ability to self-host. Advantages of Lastpass are different login for accessing to account and decrypting database. This is important because without this, a MITM attack gets access to the master password. I also found the announcement of Bitwarden, approx 1 year old now, on HN [3]. It includes some feedback about the software. Bitwarden uses AES256-CBC. How secure is AES256-CBC in this case, and what does Lastpass use? Another criticism is usage of Google Analytics. This can be disabled in the application, but I don't feel it serves a purpose for the user. It should never have been included in the first place. I also don't think either software is audited. [1] https://en.wikipedia.org/wiki/List_of_password_managers https://en.wikipedia.org/wiki/List_of_password_managers [2] https://en.wikipedia.org/wiki/Comparison_of_password_managers https://en.wikipedia.org/wiki/Comparison_of_password_manager... [3] https://news.ycombinator.com/item?id=12676979 https://news.ycombinator.com/item?id=12676979
bluejekyll 9y ago
I just switched... Thanks for the recommendation, it's excellent.

pimeys 9y ago

I'm a quite happy user of KeepPassXC as my password manager. I seriously dislike how LastPass stores the passwords on their servers. And KeepPassXC is open source and actively developed. https://keepassxc.org/ https://keepassxc.org/