4 ms·
I was just about to change to something different from LastPass, pretty much convinced about Bitwarden from previous HN mentions, until you mentioned Lockwise :
by j1elo 6y ago
I was just about to change to something different from LastPass, pretty much convinced about Bitwarden from previous HN mentions, until you mentioned Lockwise :-) care to share some pros and cons or comparison between these two?
- staplers 6y agoCurrently using both, Bitwarden is much more robust, customizable, and safe (audited by 3rd party). Lockwise is great if you want a simple pw manager for browsing online but Bitwarden is like a "life" manager that can store addresses, credit cards, notes, passwords, etc.
- AnonC 6y agoI use Bitwarden as my main password manager. But Bitwarden is still lacking in the "life" management part because common things like WiFi passwords or software licenses need to be added as custom entities. Managing those is not easy with Bitwarden. I stopped using 1Password long ago (when it moved to a subscription model), but it has had many more rich types to manage for a long time. Bitwarden has a long way to go.
- calvinmorrison 6y agoI can offer up 1password comments. It has a good native app for osx. I don't use osx. It offers a CLI tool that spits out json. I wish it would just integrate with pass(1). The Firefox add-on is close enough to abysmal that I use thier website making it inconvenient. It doesn't work with regular http auth so you have to copy the fields in manually then refresh. Otherwise it's fine. The multiple Vaults is great to share passwords among family or maybe your co-workers. It has features like TOTP and supports many types of other fields. 4/10 on usability 10/10 on its core feature set. Probably a 9/10 on osx.
- bjdean 6y ago> It doesn't work with regular http auth so you have to copy the fields in manually then refresh. There's a slightly easier way - escape out of the basic auth dialog box, open the 1password menu which will be showing you the website you're on and select 'Autofill', and then reload the page (ie Ctrl-R) and the basic auth is supplied from 1password. Not great, but easier and faster than copying in username and password fields manually (and with keyboard shortcuts available to do each step it can be quite fast). From 1password comments I believe the limitation is because Firefox does not allow 1password to interact with the auth dialog box (which isn't strictly a bad policy from a general security point of view).
- zdragnar 6y agoThere is also always https://www.passwordstore.org/ https://www.passwordstore.org/ it is a bit more work to get everything set up, but I now have an encrypted git repo of my passwords with clients on my laptop and android phone. I cant speak to ios or macos, but there is a distinct lack of good windows gui client, which is the biggest con. The major pro for me is that I know exactly how it is encrypted end to end, and have control over how and where it is stored, and can move the storage as I please, all entirely for free.
- Hawxy 6y agoI personally use 1Password due to it being better polished than Bitwarden and the support being excellent. I'm using it with Windows/Edge and haven't encountered any problems.
- dastx 6y agoI moved away from it because they still don't have a fully featured Linux client, and their 1PasswordX client is missing some features, and seems to be in general quite lot slower than Bitwarden. Having said that, Bitwarden is a big pain in the ass. I still can't open the main window when I'm in private browsing window.
- j1elo 6y agoJudging from the sibling comment (https://news.ycombinator.com/item?id=23567966 https://news.ycombinator.com/item?id=23567966), the support for non-mac platforms sounded to be less than stellar. Still nice to have different opinions, so thanks.
- jabirali 6y agoTo throw in a less conventional option, I've been very happy with MasterPassword [1] myself. I mostly just use use the browser plugin (Firefox/Chrome) and mobile app (iOS/Android). Unlike the other options, it's a deterministic password manager. This means that you don't need to sync anything, and there's no risk of losing your password database. As long as you know what website you're signing in to, and remember your one master password, you can regenerate all other passwords. [1]: https://masterpassword.app/ https://masterpassword.app/