4 ms·

Yeah 1Password is pretty awful when you consider the amount of features you get with LastPass like multi-factor authentication. 1Password relies on Dropbox. You

Yeah 1Password is pretty awful when you consider the amount of features you get with LastPass like multi-factor authentication. 1Password relies on Dropbox. Your passwords are all stored on your computer. Granted they're in an encrypted format, but if you have a jerk for a room mate they could copy your encrypted files, key log your vault password, and have access to all your passwords. On the other hand, if you get my LastPass password you better have my grid too (I keep it online so I can access it wherever, password protected). Additionally LastPass is working on SMS codes for login.

bigiain 15y ago
The there's somebody how can key log hardware you (think you can) trust, you're hosed whatever security you're relying on.
- ZoFreX 15y ago
  Negative, LastPass can generate one-time passwords which you can then use on computers you suspect to be insecure.
  - pzxc 15y ago
    But most of the damage from keyloggers happens to people who do NOT suspect they are using an insecure system (their own).
KirinDave 15y ago
LastPass also has YubiKey support for really nice 2-factor auth.
KirinDave 15y ago
LastPass also has YubiKey support for really nice 2-factor auth.
maguay 15y ago
Unfortunately, there's always potential security vulnerabilities: http://xkcd.com/538/ http://xkcd.com/538/
Pahalial 15y ago
But you can control the risk of exposure to keyloggers. You have zero control over risks to LastPass's infrastructure - which, as this blog post mentions, is a much juicier target than your passwords on their own.