3 ms·

Love to hear more about why BitWarden is a safer choice than Lastpass if anyone cares to chime in. Thanks.

• eitland 7y ago
  Allows you to run your own server.
• Someone1234 7y ago
  It isn't. But they're both safe choices. Both are based on the same underlying principles (AES encrypted database, encrypted using a slow hash of the master password). Both have been audited professionally. Both have browser extensions whose source code you can read (it is JavaScript, just open the extensions directory). Both support a full array of 2F options. People are moving from LastPass to BitWarden because it is a better product. Plus many dislike LastPass's owners due to the LogMeIn pricing/business practices (like difficulty cancelling/early cancellation to avoid additional billing/aggressive sales people/etc). The only advantage BitWarden may have is its backend is open source software and you can run a copy yourself (although most choose not to). If you're running it yourself BitWarden is likely your primary contender. If you aren't the difference is largely academic.
  • vz8 7y ago
    Thank you, that's helpful.
  • Avamander 7y ago
    Pretty sure LP's source is minified/obfuscated, it isn't just "open the extension's directory". In my experience LastPass was also much much slower in too many use-cases.
• propogandist 7y ago
  lastpass' privacy policy is very privacy hostile. They're now aggressively offering a free product with the ability to monitor (and sell) all browsing behavior tied to you as an individual (thanks to LogMeIn). >How We Use the Information We Collect and Receive >LogMeIn may access (which may include, with your consent, limited viewing or listening) and use the data we collect as necessary (a) to provide and maintain the Services; (b) to address and respond to service, security, and customer support issues; (c) to detect, prevent, or otherwise address fraud, security, unlawful, or technical issues; (d) as required by law; (e) to fulfill our contracts; (f) to improve and enhance the Services; (g) to provide analysis or valuable information back to our Customers and users. [1] (e) is a very broad and loosely defined category. A contract can include Anything and this ambigious statement enables LogMeIn to inturn do anything with data they collect from all their services (including Lastpass). In the new firefox updates, Lastpass won't let you open/run the extension until you provide it the abiltiy to monitor all browsing behavior (whereas on chrome I have it restricted to monitor sites when the extension is clicked/activated)... I will not be renewing my premium service and am looking to migrate away to another service. [1] https://www.logmeininc.com/legal/privacy https://www.logmeininc.com/legal/privacy
  • jsutton 7y ago
    LastPass only collects data on how you use the product and how well the product works. It doesn't collect info about your sites or browsing activity.
    • propogandist 7y ago
      Says who? It's governed by this privacy policy and will not work until it has browsing and tab data
• president 7y ago
  In my experience, LastPass UX leaves a lot to be desired. Also, I've heard a lot of stories regarding security negligence at LogMeIn (parent company of LastPass).
• deleted 7y ago
  [deleted]