19 ms·

Changes to LastPass Free

• chrisan 6y ago
  Headline should be single "device type". Pick computers, you get all computers. Pick mobile, you get all mobile devices (and watches) Still sad and I'll have to look at options again, it's been 5+ years since I looked. Anyone enjoying bitwarden https://bitwarden.com/ https://bitwarden.com/ ?
  • ccmcarey 6y ago
    Bitwarden premium sub for years, never had a single issue.
  • phoe-krk 6y ago
    I am using `pass` (https://www.passwordstore.org/ https://www.passwordstore.org/) with an encrypted git repository and this works well enough for my use cases. I do not have a complex threat model though, nor I need to share my passwords with other people or organizations.
  • Vaslo 6y ago
    Yes after using Roboform and Lastpass I switched to Bitwarden. I pay the 10 bucks a year for convenience but folks I know self host it and are really pleased with it.
  • qurashee 6y ago
    Been using bitwarden using a self hosted db for quite some time now, brilliant product!
  • croutonwagon 6y ago
    I moved to bitwarden a few years ago from Lastpass..Primarily because of persistent sync issues with lastpass. It seemed they kept trying to see "features" and the core product took a dive with the logmein aquisition. They were pushing things like credit monitoring, but the password syncing would get wonky from time to time with a specific browser or on my phone or vice versa. You can self host your bitwarden (though i dont). And you can, even with a free account, create a single "org" to share passwords with. In this case that org was my wife so now all our shared accounts reside in bitwarden and the password doesnt matter. Ive even gotten to the point of using their passphrase generator for manual sign-ins like my work computers.
• Crosseye_Jack 6y ago
  The title is slightly off. The limit is to a single device type, not device. If you only use LastPass on 2 devices of the same type (on your desktop and your laptop or if you only use it on your Mobile and your Tablet) you will be fine to stay on Free, However if you use it on your Desktop and your Mobile (like me) you will need to swap password managers or pay up for the service. Before LogMeIn brought them the service was free on "Computers" but you had to pay up for Mobile (Although you were able to access your vault via their website, the mobile app just made it easier). Guess it's time for me to invest my time into actually settings up and exporting my passwords to something like KeePass (I've been meaning to do it ever since LogMeIn brought them, I was just far too lazy to do it until now). $30~ for a year (the offer they included in the notice) aint that bad, but I just don't like having the rug pulled from under me and would rather support something like KeePass than support LastPass. Maybe I will change my mind after I've had some time to digest the news and play with KeePass (and its alt's).
  • bootlooped 6y ago
    FYI Bitwarden is only $10 a year. Before Bitwarden I used a combination of Keepass and Google Drive to sync all my passwords between devices. That was a workable solution, but Bitwarden is certainly easier, and I think more polished too.
    • Crosseye_Jack 6y ago
      Cheers for the info, I'll look into it. I'm not against paying for the service (I've used the hell out of LastPass) I just not a fan them pulling my use case from under me.
      • encom 6y ago
        That will always be a risk, as long as you rely on cloud services. I started using Lastpass as well, but moved to Keepass as soon as they were eaten up by Logmein. I moved to Keepass and I keep the keyfile on OwnCloud. It works very well, and even better than Lastpass (at least as it was when I last used it). Keepass has actual desktop clients, so you don't have to use a janky web-app.
• jdauriemma 6y ago
  LastPass is making a huge change to their Free product and giving users only a month to adjust. This is irresponsible at best. I completely empathize with the notion that good software is worth paying for, but a widely-used password manager needs to provide more time for users to transition into another product if they choose not to convert to paid.
  • mittaus 6y ago
    Caveat Emptor.
    • edoceo 6y ago
      That's Buyer Beware. In this case it's a free version. Caveat Liberum?
    • jdauriemma 6y ago
      The emptor's counterpart, the venditor, also has a responsibility. I wouldn't dream of offering a free product that handles one of the most important aspects of consumer data security and then drastically altering it with only four weeks' notice. Many were introduced to LastPass, probably reluctantly, by more security-literate friends and family. These are the folks most likely to be squeezed in this very short transition period because they won't necessarily know how to navigate to a different product and would probably be more likely to do something risky in response.
  • therobot24 6y ago
    > This is irresponsible at best. Not sure i agree, they make it very easy to export your info/passwords and are just returning to a previous business model. As another user here commented, it only took 15 min to switch to another option. > but a widely-used password manager needs to provide more time for users to transition into another product if they choose not to convert to paid curious how much time that would be
    • jdauriemma 6y ago
      I'm sure some users will find an alternative solution and switch easily. I'm also sure that some users will not. My assumption - take it or leave it - is that the folks who would find this more inconvenient are those who were introduced to LastPass by more security-minded friend or family member. They aren't necessarily inclined or well-equipped to transition their devices over from one password manager to another. This may cause them to abandon password management altogether or do something dangerous like temporarily store their passwords in plain text while they find someone to help them transition to another product.
• wing-_-nuts 6y ago
  I'd be fine if they limited free to one account, but not being able to sync across desktop AND mobile defeats the entire point. Guess it's time to switch to bitwarden?
  • 411111111111111 6y ago
    Eh, the mobile apps were only available for the paid version originally, so I guess they just went back to how it was before.
    • SV_BubbleTime 6y ago
      Interesting business model to revoke a feature that has become standard among your competition. I can’t get off Lastpass because I have 100 paid users on Enterprise, but why on earth would I recommend my family use LP now?
      • deleted 6y ago
        [deleted]
  • SV_BubbleTime 6y ago
    I agree. I think it’s a bad move for them. When I read the title, I just assumed that they were limiting to one mobile device which seems more reasonable. ... My mom will be effected by this on Lastpass, she is hardly a power user. This is a mistake Lastpass.
• snowoutside 6y ago
  Just switched to Bitwarden. Took me ~15 minutes to get the browser extension + app installed and to complete the migration using the export/import features.
  • sodality2 6y ago
    Don't forget to delete your account!
  • pizza234 6y ago
    I've performed the switch as well, however, a couple of things to consider about Bitwarden: - field detection is much poorer in Bitwarden (ie. it will fill both signup and login fields in some websites... including HN) - Bitwarden timeout doesn't survive browser restarts (at least, this was the last time I've tried it), making it difficult to use for people with a complex password and frequent browser closing/opening
    • wing-_-nuts 6y ago
      re: field detection How does it do with sites that insist on using a 'password' type field for both username and password? This is my biggest pet peeve on the internet today!
      • Macha 6y ago
        It handles fidelity fine, and they do a sort of masked password field for the username where you only see the last 3 characters. Firefox on the other hand used to want to save my username as ****ABC
    • ricardojoaoreis 6y ago
      I don't like using browser extensions for password managers (I read in the past these are usually the easier attacks, might not be true nowadays) and switched from LastPass to Bitwarden. The feature I miss is that LastPass has a Mac MenuBar app which provided a global shortcut to search my wallet, for Bitwarden I always have to open the app. Also, the iPhone app doesn't let you view attached images in the app, you have to first download them to the phone's storage.
• nickthegreek 6y ago
  Oof, this is a rough one! Id rather have a device number limit than a device type limit. Main Takeaway: "We’re making changes to how Free users access LastPass across device types. LastPass offers access across two device types – computers (including all browsers running on desktops and laptops) or mobile devices (including mobile phones, smart watches, and tablets). Starting March 16th, 2021, LastPass Free will only include access on unlimited devices of one type. "
  • vvillena 6y ago
    "I'd rather have" == "this is what I need to stay within the limits of the free tier" Lastpass reasons for doing this are perfectly clear. They want people to use and trust their platform, and there's no better way for doing that than allowing users to use the full version of their product. At the same time, they want revenue, and targeting the people that use Lastpass as an integral part of their workflow (e.g. myself) is a valid strategy. I've used Lastpass for years. I was a premium user, but at some point the free tier started covering my use case, so I stopped paying. Now I'm probably back at the point where I'll start paying again. I could definitely live without mobile access, but it's a convenient thing to have and I can easily afford it. Maybe I'll look for an alternative too, but it has to be just as convenient.
    • nickthegreek 6y ago
      I was previously a paying member but when they doubled their price, I realized the free tier worked for me and I move to it. Id gladly pay $15 a year for the service and not hassle with moving. But I might as well try out bitwarden for $10 now. It would also be easier for me to recommend to less technical users like my family if I knew they could sync 1 mobile device and 1 computer. Its already hard enough to get any of them to use password managers to begin with.
• Macha 6y ago
  Glad I went with self hosted bitwarden when migrating from KeePassXC + syncing with seperate apps (Dropbox originally, Syncthing these days).
  • therobot24 6y ago
    glad you switched to syncthing, don't know how anyone can recommend dropbox when syncthing exists
    • LeSaucy 6y ago
      Agreed, Syncthing has been rock solid no matter what I throw at it. 500gb of music files? source code directory with 100's of 1000's of files from npm_modules accidentally included? Photos? It just works. It also plays well with other sync providers (I sync a subset of dirs into iCloud files so phone/iPad can access things)
• mox1 6y ago
  Those of you looking for an alternative, consider moving your data to a Keepass database. Its a more or less open file format, which a lot of different tools can read. My goto tool currently is Keeweb - https://keeweb.info/ https://keeweb.info/. Its basically a SPA, can be used offline or online. Keeweb + a google drive hosted keepass database file keeps my passwords available and synced across 5-6 different devices.
  • guardian5x 6y ago
    Can you explain what "more or less open" file format means?
  • dangus 6y ago
    Never again on Keepass. The dollar savings is not worth the hassle of it. You have to use a different client on every device because the official client is Windows only, and I’ve even experienced bugs a client I used that caused me to lose data entered into secure notes. And while a single page app client is nice, it’s not good for password managers. 1Password integrates with the iOS password management API and browsers to fill in passwords and even credit card info, and I’m guessing most competitors like Bitwarden (open source just like Keepass!) do the same. Saving ~$10-50 a year on something as useful and vital as a password manager in order to “roll your own” is such a bad tradeoff. I switched off of Keepass when I almost accidentally lost data due to a client sync conflict. I had to go back to my Dropbox history and do a bunch of surgery to repair the damage. It’s just not worth it.
    • davchana 6y ago
      I have kept my PC version of database as master. All of my tablets mobiles access it in read only basis. This is to avoid the sync conflicts.
      • dangus 6y ago
        So you voluntarily prevent yourself from updating passwords when you’re on your phone or tablet just so that your password manager doesn’t lose data? Isn’t that a ridiculous design oversight? To completely handicap any situation involving more than one computer? That’s exactly why I stopped using Keepass. All that hassle so that you can save $10 a year. https://bitwarden.com/pricing/ https://bitwarden.com/pricing/
• wing-_-nuts 6y ago
  If anyone is looking for how to export their passwords from lastpass, see here: https://support.logmeininc.com/lastpass/help/how-do-i-nbsp-export-stored-data-from-lastpass-using-a-generic-csv-file https://support.logmeininc.com/lastpass/help/how-do-i-nbsp-e... Importing to bitwarden: https://bitwarden.com/help/article/import-data/ https://bitwarden.com/help/article/import-data/
• chrisamiller 6y ago
  LastPass costs $36 per year. Operating on the principle of being the customer and not the product, that seems very reasonable for a secure way to store and share the keys to my digital life. That said, it does make it a little bit harder for me to onboard my friends and family when they ask. One of the selling points has always been "Yes, you can use it on your phone and laptop" and "no, it doesn't cost anything".
  • levosmetalo 6y ago
    LastPass is a commodity. There are many free or open-source alternatives that are as reliable and as secure as LastPass that provide similar functionality. It's hard to justify even the small price for a commodity service unless you provide the best possible solution, and sometimes even that is not enough. I switched from LastPass premium that costed 15$ per year a few years ago to Bitwarden because LastPass could recognize password fields on all web pages, while free Bitwarden just works everywhere.
    • bognition 6y ago
      The functionality is a commodity but what about the UX? MP3 players were fairly common when the iPod came out but the iPod crushed all the competition? Why because the UX was simply better. Without a doubt the password manager with the best UX is 1Password. Last year ago I got my tech-averse partner to set it up on her phone, the entire process took about 10 minutes and then it was done. She's never asked for me help or support, once she got things working its simply continued to work. I've since setup it up across my family and my pre-teen child is also using it without a hitch. From a holistic perspective I love that I can manage multiple vaults. Everyone has a private personal vault that is only available to them and we have a bunch of shared vaults for things like xbox and netflix passwords. I've never used BitWarden so I cant comment on the UX but $60 a year for 1password is well worth it. I can rest easy knowing that everyone in my family has good password hygiene.
      • syntheticnature 6y ago
        I was a paid Lastpass user who switched to Bitwarden a few years back because of the UX/functionality issues Lastpass had been developing. I've heard 1password has better UX; I'd describe Bitwarden's UX as similar to the Lastpass of 5-7 years ago.
• juancampa 6y ago
  I'm all in for paying for services that handle your personal data. If you don't pay them, how do they make money? So I'm okay with this. Something to consider, however, is the alternatives. Bitwarden seems cheaper[0]. Anyone has a preference for either? [0] https://bitwarden.com/pricing/ https://bitwarden.com/pricing/
  • KitDuncan 6y ago
    Bitwarden is awesome and open source. I host it myself. Used Lastpass before.
    • deleted 6y ago
      [deleted]
  • PeterisP 6y ago
    Don't use a service, use (Free) software and handle your personal data yourself. https://keepassxc.org/ https://keepassxc.org/ is one option to do so.
    • lifthrasiir 6y ago
      Bitwarden is a F/OSS software that you can install its server on premise [1]. I hope it to be lighter, though (its minimal memory requirement is quite large). [1] https://bitwarden.com/help/article/install-on-premise/ https://bitwarden.com/help/article/install-on-premise/
      • hamaluik 6y ago
        You could try bitwarden_rs [1], much lighter on resources. [1] https://github.com/dani-garcia/bitwarden_rs https://github.com/dani-garcia/bitwarden_rs
    • twic 6y ago
      What are the options for using KeePass on Android? Is there a way to get auto-filling in apps? How about in Firefox for Android?
• Vvector 6y ago
  I have used BitWarden for 2+ years. Super solid, free, and open-source.
  • berkes 6y ago
    Using it for about the same time. On mobile (Android), deskop Linux in GUI, on some servers to hold the ansible-vault- and superuser passwords and in my browser. Migrated from keepass and seahorse. Migrating did require some time and effort, mostly because seahorse had no proper export function. I still need to dive into what features premium offers over free, I'll gladly pay, just never had the need for that.
• lxgr 6y ago
  And that's it for me, I'll switch. The only remaining advantage of LastPass over the competition until now has been pricing.
• un-devmox 6y ago
  The last bit of motivation I needed to finally make a switch! I know there are a lot of threads about this, but what do people recommend? Ease of use/transition is key or I won't be able to convince my partner to switch!
• jonpurdy 6y ago
  I've been on 1Password since 2007. Unfortunately, software quality seems to have taken a nosedive since version 7 came out (disregarding the subscription issue). Random beachballs and slowdowns, annoying 2FA and duplicate password warnings, and decoupling of stored files from login entries. I have been considering a replacement but haven't found anything up to the ease of use and Mac/iOS integration of 1Password yet.
  • erichurkman 6y ago
    Same boat here. 1Password is now the slowest piece of software I use on a daily basis. 15-30 seconds to get a password out of 1Password mini, laggy and unresponsive keyboard navigation, TouchID prompts that stack under other modals or windows so they don't work, random beachballs, ... the list goes on. At least sync still works flawlessly?
    • okprod 6y ago
      1Password browser and Mac app work for me without the issues you mention, paying user since version 5. I'm on a late 2013 MacBook with Catalina. I had the beachball issue in Safari but it went way after I restarted once. I tried LastPass but on the first day it didn't save a password I generated like 5 seconds earlier, and I stopped trying it immediately.
  • AlexandrB 6y ago
    Yup. Since 7.7 my 1Password looks like this (https://imgur.com/a/Zz4WSdx https://imgur.com/a/Zz4WSdx) on my external screen, with the scaling of the background inexplicably broken. I also see other graphical glitches here and there. Meanwhile 1Password 7 for Windows every few months forgets that I registered it and I have to go find the license file (within 1Password!) again. The paternalistic Watchtower "feature" is a whole other set of annoyances I wish I could disable.
  • willyt 6y ago
    I dont like the new safari web extension that adds little in page pop-ups everywhere. When I enter my master password, how can I be sure that the pop-ups are coming from the 1-password web extension and not from the website or another extension? Is it sharing the DOM with the website? If not, how are they separated? I realise I don’t understand how web extensions work but even so I don’t see why these pop-ups couldn’t easily be imitated by the site I’m on and I feel that it’s just asking for trouble doing stuff like that. After a bit of googling I realised that its possible to turn off, so I have. 1password has been feature complete for years now, I think they are changing things for no reason at this point. Just charge me for an update when operating system upgrades break the software. Sounds harsh I know, but TBH I wouldn’t mind if apple added family sharing to passwords and finally finished sherlocking them.
• dangus 6y ago
  Price aside, last I checked LastPass was terrible software compared to 1Password. I had all kinds of syncing problems with the browser extension. And LastPass had a huge breach in the past, which its competitors didn’t. I don’t trust that it’s quality software - especially because it doesn’t “look and feel” like quality software. Plus, they’re owned by LogMeIn, which is basically a crappy software conglomerate that includes GoToMeeting, and is owned by a private equity firm. My experience was was ~2017 as an admin for their enterprise offering, so take that with a grain of salt. But my point is: compare all the options. Competitors like 1Password, Dashlane, and Bitwarden, and probably many others are worth looking into, and are almost certainly better than LastPass.
  • glenneroo 6y ago
    Those issues were ironed out years ago, at least in my case, and they were very very short-lived issues, though perhaps I was lucky. 2FA/Yubico support is nice as well. My main gripes are the lack of subdomain support e.g. if you have multiple subdomains, LP will offer ALL passwords for that domain and you have to scroll through the list to find the right one. #2: when you want to copy a password from one of the drop-down menus, sometimes "Copy Password" is above "Copy Username" and other times it's reversed, adding some extra cognitive load and just annoying due to lack of consistency.
  • kmfrk 6y ago
    Not sure why people are downvoting you - sunk cost fallacy maybe. LastPass was a mess, and I was a very happy new 1Password customer. LastPass customer service is some of the worst I ever experienced. The mobile 1Password experience is excellent as well.
  • macNchz 6y ago
    I completely agree–LastPass is absolute garbage compared to alternatives. Genuinely one of my least favorite pieces of software I've ever had to use with any regularity, and my threshold for frustration is higher than most.
• stmw 6y ago
  Lastpass is very popular but has had a very unfortunate security track record, with several security incidents that make one worry about their whole approach to security. Information on these is widely available and IMHO, the details would've sunk a less successful product. May be worth reviewing those if you're considering it, or if this change in the free service is making you reconsider using it. At the same time, it's probably true that for many users, Lastpass is better than no password manager at all, with one reused password on a postit.
• timvisee 6y ago
  Terminal gurus might like what I've been working on lately: https://github.com/timvisee/prs https://github.com/timvisee/prs Free and open-source, keep control in your own hands, forever. Encryption with gpg, sync with git. Compatible with pass, which means better support and easy migration.
  • pyed 6y ago
    I'm a happy `pass` user and I'm glad I found your work!, My only complaint with `pass` was how slow it is, and `prs` is pretty fast and completely compatible with `pass` plus some extra useful additions which is great!, I hope that the `otp` subcommand support is on your road-map. Cheers!
  • hkt 6y ago
    How does this differ from pass? At first look it appears to be pretty much the same?
    • timvisee 6y ago
      The basics are similar but it has many annoyances fixed, has a nice and quick interactive interface that doesn't get in your way and it is quite fast. It also provides features like syncing with multiple machines, multiple (gpg) recipients, aliases, property selection, Windows support and more. And I might add gpg alternatives such as age soon. See the README for a better overview. You might like to give it a try. It automatically uses your pass store.
• dString 6y ago
  The link to upgrade on their article is broken. Good start. http://www.lastpass.com/buy-premium?cp=LPP2021-DT-25CS http://www.lastpass.com/buy-premium?cp=LPP2021-DT-25CS 500
• hoseja 6y ago
  What's wrong with KeePass, besides low marketing budget?
  • Macha 6y ago
    1. No inbuilt syncs. Dealing with sync conflicts manually eventually gets frustrating. 2. No multiple URL support. I had to have three entries for roll20 to support their app.roll20.net, roll20.net and forum domains. These duplicated entries also make rotation a pain and reduces the value of duplicate password tests when migrating to a password manager approach initially. 3. Poor Android apps. Apps don't support auto fill, have a UI from the gingerbread era, don't sync well even given the above caveats, and the android file system permission tightening has made using a seperate unrelated app to do the sync more painful. 4. Lack of a standard for identifying apps. Do they use the URL field and put the store ID in there? Do they use a custom field to allow having app + website login use the same entry? Does your next mobile app use the same field or even support that field?
  • SV_BubbleTime 6y ago
    Tell you what, I’ll give you my moms phone number and you have her set up keypass remotely with only quick basic instructions. No? Because she was able to set up and run Lastpass fine.
    • dingaling 6y ago
      And now she'll have to export and migrate away from Lastpass. So the complexity was basically tail-loaded. One of the major advantages of an app like Keepass{whatever} is that once it's set up it keeps working without subscription or keeping an eye on your inbox for changes to the Terms of Use.
      • SV_BubbleTime 6y ago
        She could pay the $12 or whatever it is.
• abhinav22 6y ago
  MacOS / IOS users have all this for free seamlessly :)
  • saddestcatever 6y ago
    Well, not really "free", you've just already paid for it.
    • abhinav22 6y ago
      True
  • BozeWolf 6y ago
    Can you export the data from keychain? I am a macos/ios user, but at one point i will probably move to something new or better. That's why im using lastpass (considering 1password or bitwarden now).
    • abhinav22 6y ago
      Not sure to be honest
    • PascLeRasc 6y ago
      Yes, 1Password will help you export Keychain.
  • woeirua 6y ago
    Except for those times you have to use a Windows computer. Or have to share those passwords across multiple devices that don't belong to the same person. I used Keychain for a long time. A dedicated password manager is a vast improvement.
    • abhinav22 6y ago
      My Windows solution at work is Google chrome password manager + an excel spreadsheet Very insecure, buts that’s my fault and a password manager would be a big step up.
• edoceo 6y ago
  My team has been using Passbolt for a few years. Not amazing, not terrible, does all the things you'd expect. Hard cost $60/yr. Soft cost maybe $1000/yr
• blunte 6y ago
  I very happily pay $10/year for Bitwarden. It is in my opinion superior to Lastpass, and I don't have the doubts of the corporate governance.
  • Maxburn 6y ago
    Good to hear, I want to make the jump myself some day. At the moment I have a personal (paid) LastPass merged with my companies enterprise Lastpass and for sanity sake I get both in one UI with Youbikey support.
  • JumpCrisscross 6y ago
    How does it compare with 1Password?
    • neogodless 6y ago
      It's probably tough to find a thorough review where someone put basically all their passwords in different password management tools and lived with them for long enough to compare them. Then again, people have undertaken more arduous tasks before. For a while, I had the horrible practice of using the same username and very simple password everywhere. Eventually my "one true password" became slightly more complex, but I still had some bad habits. I eventually started letting Chrome save all my passwords except for, of course, my Google one. I switched to LastPass (free) for a while. (My memory of this is a bit fuzzy.) At some point I wanted to switch to something less, eh... corporate? So I got BitWarden. I really like the password generator, and use it exclusively now. (There was a web site I used to use for this, but of course this is much more convenient.) It was a bit rocky in the earlier days. Integration with the browser on Android could sometimes be a little shaky. It's still not perfect, but I don't have good comparisons there. I use Firefox on Android, Windows and Linux. It works really well on the desktop and mostly really well on Android, though with the browser it's unreliable if you rely on the Android app, so I install the Firefox Add-On for BitWarden, and that works reliably. My spouse set up her own account, and we share some of our important passwords via a free organization. This is a great feature and gives us both some peace of mind if we were ever required to get into each other's accounts. We also paid the $10/year so she could see reports on her passwords, and get rid of breached, insecure and duplicate passwords. She has adapted readily to using the password manager though she mostly just uses it on the computer, not on the phone. Overall we are very happy with it and I believe it's an excellent option. I cannot, however, compare it to 1Password.
• hyperpl 6y ago
  I would suggest users on UNIX-like OS's to try passwordstore.
• frombody 6y ago
  I wonder if this was forced by the moves that Microsoft is making. If you have a Microsoft authenticator app on your phone, you'll likely have noticed that they started offering regular password management through the same app to all users for free.
  • Vvector 6y ago
    Hmm, doesn't that defeat the purpose of MFA?
• KoftaBob 6y ago
  For those already paying for Dropbox, Dropbox Passwords is included and is pretty solid.
  • roussanoff 6y ago
    Does the autofill work well? I was considering trying it out, but, unlike 1Password and Lastpass, there are really no reviews of Dropbox Passwords anywhere.
    • frompdx 6y ago
      I personally had no idea this existed and I pay for dropbox.
    • KoftaBob 6y ago
      Works great, very similar to LastPass in how it's implemented.
• sjaak 6y ago
  Use this: https://www.passwordstore.org/ https://www.passwordstore.org/ A combination of a shell script, git, and pgp. It's not the pinnacle of convenience, but it works, and you don't have to deal with stuff like this :)
  • skytreader 6y ago
    Sorry if I'm asking an obvious question but how is this more convenient than pure-desktop Lastpass? If I'm inconvenienced by Lastpass' change of terms this is hardly a solution isn't it?
• deleted 6y ago
  [deleted]
• peach45 6y ago
  Good thing I use pass https://wiki.archlinux.org/index.php/Pass https://wiki.archlinux.org/index.php/Pass
  • cardamomo 6y ago
    I love pass but found that it was difficult to use the associated Android app and keep things in sync.
    • cl3misch 6y ago
      The UX of the pass iOS app [1] vs. the Android app [2] (especially the need for OpenKeychain on Android) is the main reason keeping me on iOS. [1] https://github.com/mssun/passforios https://github.com/mssun/passforios [2] https://github.com/android-password-store/Android-Password-Store https://github.com/android-password-store/Android-Password-S...
      • cardamomo 6y ago
        Yep, it's pretty painful to have to use a separate app just to manage the PGP key. I've also found it very difficult to sync with git over SSH with a key instead of a password.
  • m-chrzan 6y ago
    pass is great. I use the dmenu script to get passwords into my clipboard without leaving the keyboard or being locked into browsers with a supported extension. As others have mentioned, the Android app has slight issues, but they're not dealbreakers for me. There's some interesting pass plugins, e.g. pass-otp. You can get 2FA passcodes from the commandline rather than being locked into Google's Authenticator.
  • qntty 6y ago
    I used to use pass. I must be too dense to understand how to properly backup pgp encypted files, because I had to reset all my passwords when I couldn't decrypt my backup.
• Causality1 6y ago
  The same thing will happen here as when Dropbox limited free accounts to three devices: all of us who've spent years evangelizing the service to our friends and family are going to get a bunch of pissed-off phone calls. They're not going to understand or care why, they're just going to be mad that it worked yesterday and doesn't work today.
• praveenperera 6y ago
  Recently switched to 1Password from LastPass and I love it. The autofill is much better.
  • robbyking 6y ago
    5 or 6 years ago I was talking to coworker about password managers, and they told me how much they liked 1Password. I decided to give it a shot, and after a week or so decided to switch permanently and delete my LastPass account. When I told them that I had made the switch, they laughed told me they had done the same: they tried LastPass and decided to delete their 1Password account! Personal preference is funny like that.
• pdimitar 6y ago
  Surprised that nobody here mentions Enpass. Its mobile app is paid, sure, but it's a one-time cost and it's using an AES-256 encrypted local sqlite3 DB that can be synchronized with several popular cloud storage options: Dropbox, OneDrive and any WebDAV server. So you have your credentials vault with you everywhere. Very happy user for years. No subscriptions, desktop app is free, you just pay for your iOS / Android app once. That's it. Never had a problem with it and you can also tie it to your TouchID / FaceID, too.
  • mixedCase 6y ago
    Well, there are high quality FOSS KeePass clients for all platforms, like KeePassXC, Keepass2Android and Strongbox. So paying for a password manager that requires syncing doesn't seem like an attractive option.
    • pdimitar 6y ago
      At the time when I was evaluating my options only CLI clients for KeePass have been available so I had to make a call. Plus the mobile app is like $15. Whether $15 is worth your good night's sleep (and less time burned to evaluate all options) is something we can debate endlessly but my stance is "yes".
  • bbkane 6y ago
    I use a similar solution- KeePassXC on desktop syncing the encrypted passwords to Keepass2Android via Dropbox.
    • Cthulhu_ 6y ago
      I used KeePass years ago, but I stopped using it because at the time, the Linux and Android apps were really bad.
  • Cthulhu_ 6y ago
    How is its recovery feature? Does it keep a backup database file in case of data corruption?
• robinhood 6y ago
  Personally, and it’s just me, but I don’t trust cheap, or even free, password services like Lastpass, with an ugly user experience on top. I’m more than happy with my 1password subscription. User experience is incredible. Support in the iOS ecosystem is extraordinary.
• Tepix 6y ago
  What's a good solution for a WebDAV storage backend?
  • radus 6y ago
    I use this docker image: https://github.com/BytemarkHosting/docker-webdav https://github.com/BytemarkHosting/docker-webdav, but with a PR that has yet to be merged that makes it easy to use a different UID/GUID [1]. I've tried to do it with nginx, as described in [2], but it just did not work reliably - it would often disconnect and instead of going down a debugging rabbit hole I just used the Apache based image. There is also a Go server [3] that I have not tried. Lastly, I put an nginx reverse-proxy in front of it for SSL - probably not necessary since nothing is on the public internet. [1] https://github.com/BytemarkHosting/docker-webdav/pull/28 https://github.com/BytemarkHosting/docker-webdav/pull/28 [2] https://www.robpeck.com/2020/06/making-webdav-actually-work-on-nginx/ https://www.robpeck.com/2020/06/making-webdav-actually-work-... [3] https://github.com/hacdias/webdav https://github.com/hacdias/webdav
• jackdaw12 6y ago
  I still think LastPass is a good product and good value.
  • jzl 6y ago
    I agree. 1Password has done tons of shady stuff too, far worse than this, IMO.
• foolinaround 6y ago
  keepass - synced via nextcloud -- is one alternative -- that i use, across both mobile and desktops
• davemtl 6y ago
  LogMeIn had (and probably still has) a reputation of putting existing features behind a paywall. I have no problem paying for a service if I like it, I was a paid subscriber before LogMeIn and for a year or two after the purchase. Slowly, prices started to rise, features for free users were being put behind a paywall. After many years of recommending LastPass to family and friends, I just couldn't anymore. A few years ago I switched to Bitwarden after evaluating everything from 1Password, Dashlane, Keeper as well as free/open source applications like Keypass and Password Safe. Why Bitwarden? It satisfied my need to be able to sync between a handful of devices (Windows desktop/laptop & Android) and replicated features that were previously available in LastPass. In the last three years that I have been a paid subscriber of Bitwarden, the price has not gone up (yet).
• rightisleft 6y ago
  Goodbye Private Equity raiders, we're out! I've also been waiting for an excuse to migrate off LastPass. Their 'shared' functionality on both personal and corporate accounts is a joke. Passwords consistently do not update when shared with other paid plan members. We also pay for corporate support. I would say the average response time is about 48-72 hours. We've been talking about replacing them. LastPass has been at the top of our axe list for SaaS tools.
• kpierce 6y ago
  This thread just seems to be a promotion for BitWarden.
  • smilekzs 6y ago
    FTFY: This asshole move from Lastpass just seems to be a promotion for BitWarden.
• utf_8x 6y ago
  Even cancelling the free plan completely would still be less insulting than this.
• deleted 6y ago
  [deleted]
• throw982739182 6y ago
  Well, time to switch it is. I can't justify more than a couple of dollars a year for a password manager. Also artificial limits, especially when companies limit existing features like this piss me off (cough google photos cough). Why not add new features and make them premium only? Plus I recently changed my Lastpass password and they had added symbol/number requirements since the last time I had changed the password and it would not let me use just a word based password. Bitwarden let me without issues. Checking out the extension now, it's also much easier to use than Lastpass. For me I don't care, but for my parents the Lastpass chrome extension interface is really confusing.
  • jedimastert 6y ago
    > Also artificial limits, especially when companies limit existing features like this piss me off (cough google photos cough). On the one hand, I tend to agree that changning existing features to paid is not-great (disclaimer, I was paying for Google Photos/One/Whatever even before they announced the changes), I wouldn't call space limits "artificial"
    • throw982739182 6y ago
      Yes, perhaps that wasn't the best example, the issues get lumped together in my head. But for google, I believe the issue was people were abusing it. The proper solution would have been to stop the abuse, not what they did. Or for example, they might have removed unlimited video uploads which would make more sense, or had soft limits. Also you can't tell me google did not foresee this happening, which just tells me they used the free storage as a lure.
    • gregoriol 6y ago
      Why isn't it artificial? If they already had sync between devices, making it unavailable is purely artificial.
      • throw982739182 6y ago
        The reply to me correctly pointed out that I compared it to the new google photos storage restrictions which could be interpreted as not being artificial, not that the lastpass restriction aren't.
• kemonocode 6y ago
  I migrated from LastPass to KeePass + Syncthing when they got bought out by LogMeIn. Sounds complicated but only the initial setup is a little awkward, then it's smooth sailing from that point on, and no centralized server to ever worry about or your platform of choice going rogue. Keeping your devices secure is still on you, but that's true of any password manager. It was absolutely the best choice to make and I encourage anyone to do so and never have to worry about your service going down or suddenly asking a "nominal" fee to the keys of your kingdom. Of course, should the need ever arise, it's not that hard to migrate to something like Bitwarden.
• fiws 6y ago
  LogMeIn … more like LogMeOut …
• davidg109 6y ago
  Recommend taking a look at MYKI. This is my go to password manager, and no information is stored in the cloud.
• mikaelsouza 6y ago
  People seem to be very positive about Bitwarden. I've been using Lockwise from Mozilla. Any thoughts about it? I've been using it for a few months to sync between Win, Mac and iOS and it has been working pretty nicely.
• ChrisRR 6y ago
  I think the issue with lastpass is its popularity, which would make it a target for hackers. If someone brute forces your password, then they've got access to everything Are there any less popular but well featured password managers, or any roll your own solutions that wouldn't be so easily targeted
  • Cicero22 6y ago
    I haven't personally done this, but you can host your own bitwarden server: https://bitwarden.com/help/article/install-on-premise/ https://bitwarden.com/help/article/install-on-premise/
• mod 6y ago
  Even though I know the answer, I think it's interesting to note that none of the "questions" posed ask "Why?" I guess they felt the obvious cash grab was obvious enough to have no need for explanation. I'll be moving off to somewhere else, despite being pretty deeply entrenched in lastpass. Hopefully there are some migration tools available. I have hundreds, maybe thousands of passwords stored--generated passwords which I do not know at all. Based on comments here, I'm likely to end up with a self-hosted bitwarden. I'll feel better about that, anyway. I'm trying to eliminate my cloud dependencies, besides my VPS.
  • Sohcahtoa82 6y ago
    > Hopefully there are some migration tools available LastPass will export your saved passwords into a CSV file. Dunno about importing into another program, though.
• quyleanh 6y ago
  How about Keepass? I use on all devices.
• riffic 6y ago
  lastpass has been circling the drain. use bitwarden, use 1password, use any of the built in alternatives provided by your OS or browser. anything is better than Lastpass.
• dj_mc_merlin 6y ago
  I do not see the sense in using a product for this. You can use a free local password manager (like keepas) and cron rsync the database file to some backup servers you control. Or regularly back it up to an air gapped medium if you're paranoid. The chances of someone being able to break the encryption if you have a strong password for the next 5-10 years is nil, and by then you should've changed your passwords.
• theshrike79 6y ago
  I switched from Lastpass to 1Password after the first security oops Lastpass had. Haven't looked back.
  • swagonomixxx 6y ago
    Same here. 1Password is a joy to use.
• freedomben 6y ago
  I've been procrastinating the switch to BitWarden for some time now. I guess the priority list just changed. Glad I check HN ;-)
• 2Gkashmiri 6y ago
  i see nothing better in these "cloud" password providers which isnt in my keepass file which i have managed to keep updated for the past 5 years now. This is like one of those times when you break a feature and then charge people to fix it.
• carlivar 6y ago
  Note that you get a free Family account if you are already in an Enterprise plan (so if your work uses it, which mine does).
  • cabbagehead 6y ago
    "Premium as a Perk" is not automatic with Enterprise plan, as far as I can tell. Your company can offer it if it pays "discounted bulk pricing".
• pastelsky 6y ago
  I moved away from using the LastPass Chrome extension after realising that it makes page loads upto 50% slower. https://twitter.com/_pastelsky/status/1180864405648502784 https://twitter.com/_pastelsky/status/1180864405648502784 On the whole, every part of LastPass feels dated and unmaintained.
• kevindong 6y ago
  LastPass was my first ever password manager and I used for it ~5 years. A few years ago, I got fed up with how sluggish it was (at least, at the time). So I switched over the Bitwarden. Unfortunately, the Bitwarden Safari extension for macOS had a bug where I had unlock my vault every time I wanted to use a credential and that got annoying. Around the same time I started using Bitwarden, I started at a job with a corporate 1Password subscription for employees. 1Password's UX was so much better than Bitwarden that I switched my personal account over a few months into using 1Password for work. 1Password isn't perfect (e.g. auto-generated passwords can't be autofilled unless you manually convert it to be a 'Login'), but it's by far the best I've used.
  • Wowfunhappy 6y ago
    I was going to reply "the problem with 1password is they have no Linux support," but it looks like Linux support actually got added late last year! (Or at least there's an open beta.) https://blog.1password.com/1password-for-linux-beta-is-now-open/ https://blog.1password.com/1password-for-linux-beta-is-now-o... Anyone used both 1password and Bitwarden? I'm using Bitwarden right now, but I dislike the fact that their desktop app is Electron based.
    • falcolas 6y ago
      Keepass is another cross-platform option (open source), though the UI on non-windows environments is a bit... crap. Nontheless, it works, and it works well.
      • Wowfunhappy 6y ago
        Yeah, the lack of a good Mac client made Keepass untenable for me. I tried several and they all sucked. A password manager is the one thing which I really need to work well everywhere, because I need access to my passwords everywhere.
        • secfirstmd 6y ago
          For what it's worth KeePassXC these days is very good useability wise and has some awesome features in it
• DyslexicAtheist 6y ago
  switched to KeepassXC around 2 years ago when LastPass got bought. works great! there is no company that tries to brainwash me into thinking moving secrets[1] over a network is a a good strategy for managing them. [1] it doesn't matter scerets are technically encrypted. the threat-model for managing and storing secrets is different. I also don't want people to guess how they were created, when they were last modified, where they will be used, what other devices use them etc.
  • metalliqaz 6y ago
    so you don't sync your keypass data?
    • DyslexicAtheist 6y ago
      I prefer a different dedicated database for each device. none of my accounts are used across devices. E.g. hw based compartmentalization is for me much better to reduce the cognitive overhead and avoid making mistakes.
      • sofixa 6y ago
        What happens when one of the devices fails?
        • DyslexicAtheist 6y ago
          restore from offline backup?
          • metalliqaz 6y ago
            and you don't use the network for backups either?
            • DyslexicAtheist 6y ago
              no. just sync with external locally connected disk
• khnov 6y ago
  They change the free plan after gaining users, I am not fan of this behavior, I am migrating to bitwarden.
• havelhovel 6y ago
  LastPass was great when it was free, but 1Password is the better value now. Even Bitwarden provides a better looking UI. Glad LogMeIn made this change public before I moved my startup over to their service out of loyalty (i.e. laziness).
• somehnguy 6y ago
  I moved to Bitwarden about a year ago when I got fed up with the terrible UI in Lastpass. Bitwarden isn't the pinnacle of UI either, but at least it's way cheaper. Been very happy with it.
  • aquir 6y ago
    same story here! Happy with it since. Bitwarden is open source too!
  • irrational 6y ago
    How well does it work on iOS? I’ve been happy with how well LastPass integrates with iOS so far.
    • majormjr 6y ago
      It works well for me on iOS, not sure how it compares with LastPass's app but BitWarden does everything I need on the phone.
    • somehnguy 6y ago
      It works great on iOS. Full integration as you would expect, pops up at the top of the keyboard for app & website autofills. FaceID is also implemented to authenticate before opening your vault. edit: One note about something that was bugging me for a while...items created on my computer sometimes wouldn't show up in the vault for immediate use. Painful when you sign up for a service using your computer and then try to immediately sign into it on your phone. In the iOS app settings there is 'Swipe down to refresh' (or similar) - turn that ON. Not sure why it was off by default, but it totally fixes the issue. Just swipe down to refresh the vault and your new item appears.
      • rekabis 6y ago
        I think with any install of BitWarden, be it a browser add-in or separate app, the one you are adding a new credential into knows enough to sync to the cloud, but the others won’t know that new data awaits in the cloud until they do a scheduled query/poll or you manually sync through those clients. Having a push feature only works if you can engineer your app or add-in to open up the necessary ports or tunnels in the OS itself. Polling on the client end will always be easier to implement. Also: just checked BitWarden v2.8.0 (449) on iOS 14.4, no setting for “swipe to refresh” anywhere in its settings.
• baumandm 6y ago
  This seems like such a weird pricing model. My single highest-priority requirement for a password manager is access from both computers and my phone.
  • rezonant 6y ago
    I know right? They probably would have been better off just making it one computer and one phone, and for more devices go Premium. I think that would be fair. But a password manager that can only be used on one of my two critical devices (computer and phone) doesn't seem very useful.
• 0xfacfac 6y ago
  I happily pay for Bitwarden, once tried Lastpass and it was horrible.
• scrooched_moose 6y ago
  On one hand I'm completely ok paying for a service like this, because it is worth it. On the other, I'm pretty angry about this change. I am so sick of services luring you in with a free tier, then changing the terms once they have you locked in. I've been considering a movie to 1Password for a while, and this is the final push I needed to jump to their paid tier instead.
• boromi 6y ago
  I've been using KeePass for ages. Yes the UI needs help,but it's predictable and hasn't had any issues or bugs.
• metalliqaz 6y ago
  Just signed up for Bitwarden to see if that will be a better alternative, but I have to say the TOTP support isn't as good as LastPass. LastPass has a real authenticator app that I can use just like Google authenticator and also as a 2fa for lastpass, which it managed without requiring a copy of the code.
• trey-jones 6y ago
  Right now I'm contemplating rolling/hosting my own password manager. Some comments have mentioned FOSS alternatives. Can anyone provide feedback on those examples? Sharing is not important to me, and I could live without autofilling probably. Features I do like: 1. Easily generate a new password on whatever device I'm using. 2. Save it, and sync it seamlessly to other devices.
• hedora 6y ago
  There are a lot of recommendations for bitwarden here. It’s open source, and popular, but their website suggests Linux support is middling at best. Their desktop app download page only has AppImage’s for x86, and non-auto-updated debs and rpms. Does it run on ARM Linux? Is it packaged natively by most Linux distributions? Are the packages reasonably up to date?
• gordon_freeman 6y ago
  From their blog update it is not clear if I use Lastpass.com on a safari browser on my iPhone will it detect Mobile device type or Computer? Basically, if I don't want to pay Premium can I still access LP on my computer and my iPhone (using browser)? Does anyone know?
• harg 6y ago
  LastPass is trash software. We use it at my company and it’s universally hated. Full of bugs, terrible ui and bloated extensions that slow web pages. I wouldn’t voluntarily use it even if it were totally free. Nowadays there are so many better options for less money. I say this as a satisfied 1Password user but I’ve heard good things about many other products.
• prepend 6y ago
  This is a feature not a productTM. I switched to using safari’s password sync across mobile and desktop. It only works on iPhones and macOS desktop safari, but I adjusted my workflow. It’s both free, and reliable as long as Apple supports it. But I trust Apple to exist or migrate better than a dedicated product company like lastpass. Both for a decent user workflow and for not being breached (much scarier to me). I know that companies learn from security incidents and that we should reward, not punish companies for being transparent in their responses. But lastpass [0] has had issues with breaches and potential breaches and I’m nervous about storing bank passwords and whatnot with third parties. I used to recommend lastpass because it was easier to use and better than others. But now, for people who don’t know how computers work, I just recommend to buy an iPad or iPhone and use their password managers. I think it’s going to be tough, even if free, to compete with this. Doing stuff like making users choose between desktop and mobile, completely arbitrary with no real engineering driver, will just move more users away, I think. [0] https://en.wikipedia.org/wiki/LastPass https://en.wikipedia.org/wiki/LastPass
  • stingraycharles 6y ago
    LastPass is one of the only ones that supports MFA on Linux and iPhone with my Yubikeys. Their security track record is a bit meh, but generally speaking, I’m very happy with how they integrate everywhere.
    • michaelcampbell 6y ago
      I mean to each their own, but for a password manager security trumps integration for me.
      • ballenf 6y ago
        Are some of the options discussed more or less secure than the others?
        • michaelcampbell 6y ago
          Well, pedantically yes unless every option is exactly as secure as all the rest. Less pedantically there's stuff like: https://hackaday.com/2016/08/01/lastpass-happily-forfeits-passwords-to-simple-javascript/ https://hackaday.com/2016/08/01/lastpass-happily-forfeits-pa...
• devwastaken 6y ago
  Wow that is absolutely terrible. What happens when you don't have access to your computer or phone? This idea had to be thought up by marketing management it's so bad. Definitely lost me as a customer.
• fukmbas 6y ago
  Quit using lastpass garbage. I don't know why anyone is using anything other than KeePass. Open source or bust
• rrrrrrrrrrrryan 6y ago
  I've been wanting to move away from LastPass for a while now for different reasons - it feels very heavy and clunky. It's slow and the autofill can be glitchy. Does anyone have any recommendations from this perspective? 1password seems more Apple-oriented, but my devices are all Windows (chrome), and Android. There's lots of discussion here about "terrible UI," but I imagine none of these password managers are consistently great across all platforms. E.g. Someone using an app solely on a linux desktop in Firefox will obviously have a vastly different experience than someone using the app primarily on an iPhone with safari.
  • kennymeyers 6y ago
    I found 1password on windows to work just great. It's not as great as the Apple version but it's way better than the alternatives.
  • joebasirico 6y ago
    I recently migrated from LastPass to 1Password. Honestly it's been great. The UI is better, sharing vaults is easier, they have integrations with haveibeenpwned.com, and integrations are seamless. There's no free tier, but the cost feels worth it to me. I was able to get my whole family on 1Password without too much hassle.
  • Lunatic666 6y ago
    We moved away from LastPass for the reasons you mentioned and for the problem that I couldn't recover the password of a business account. The account was just not usable and they couldn't even delete it, so once someone made a mistake while opening it, their email address was blocked. I think they fixed this since we moved, but 1Password is not standing in my way and does everything reliably and quietly. They have apps for all (mobile) OSes and even a native Linux app, what I really appreciate. I just saw they also have a CLI, I have to test this, too. I'm just a happy customer with ~60 users and not affiliated.
  • jbombadil 6y ago
    I use 1-password and I don't agree with it being Apple-oriented. Their integration with Apple OSs is awesome, but their Windows solutions work really well as well. I'm very happy with it.
• kevinsky 6y ago
  Just changed to BitWarden, seamless export from Lastpass and import into chrome. Syncs across devices and is free.
• time0ut 6y ago
  So I have until March 16th to move to a competitor. Got it.
• speedgoose 6y ago
  Thanks for posting this, I just migrated from lastpass to bitwarden.
• gatestore 6y ago
  Before raising its prices (or changing its free features) LastPass should get an independent security audit of its infrastructure, applications and extensions. There is a lot of competition in password managers, and they have almost the same functionality. So if LastPass wants to charge more, it has to differentiate from the other password managers, and given the security aspect of its business an audit would be the way to go.
• frompdx 6y ago
  Passwords are the most unfortunate part of the web. It is a bad user experience that leads to poor security. I've spent the last couple of years trying to convince friends and family to use a password manager (usually lastpass) and use a different password for every site. Many were using some variation of the first password they ever made for their dialup AOL account in the mid 90's. I can't blame lastpass for choosing to monetize their product. Securing the web is also not the job of lastpass. Unfortunately, making users pick either a desktop or mobile device for the free tier and requiring pay to have both I think many will pick the path of least resistance and go back to their old habits, foregoing password managers and unique passwords altogether.
• radus 6y ago
  I've tried LastPass and 1password, but neither has a good implementation of auto-type on desktop, where my definition of good is KeePass. To those that dismiss KeePass as being too clunky I hear you, but I think the situation is better than it used to be thanks to the development of several high quality and open-source clients for non-Windows platforms: iOS (StrongBox, KeePassium), MacOS (StrongBox, MacPass), Android (Keepass2Android), and KeeWeb as well. I would pay special attention to whether or not these clients support KeePass' built in database sync/merge feature [1], especially if you don't use a cloud back-end. Most cloud providers will save two versions of a file when there's a sync conflict ensuring you don't lose data. As for storage back-ends I've used OneDrive, sFTP, and WebDAV [2], and I'm currently migrating everything to WebDAV. sFTP works well but some clients take too long to open and close the connection. [1] https://keepass.info/help/v2/sync.html https://keepass.info/help/v2/sync.html [2] https://news.ycombinator.com/item?id=26157184 https://news.ycombinator.com/item?id=26157184
• majkinetor 6y ago
  I ditched all commercial ones because they are bad and majority can't even recognize intranet sites correctly. I use now Next Cloud Passwords plugin (FOSS) and can't be happier. It is missing some mass-sharing features that it will get eventually but other then that, its a pleasure to work with. Seriously people, this is one awesome tool, it comes with web interface, browser extension that works great, is totally free and team ready. Developer is responsive and updates it regularly. I was using everything before it, from LastPass, over pass, psono, bitwarden, 1pass, keypass, just to name few, but after the NC Passwords I never looked back. The only hurdle is that you need to have NC installed, but NC is great too on the other hand :) https://github.com/marius-wieschollek/passwords https://github.com/marius-wieschollek/passwords
• taurath 6y ago
  I hate this model of software business which is a classic bait and switch. Get enough users to monetize and then put the screws to them.
  • JustSomeNobody 6y ago
    Bait and Switch is illegal. I'm sure they can do this on some technicality.
• Izikiel43 6y ago
  Ok, so basically I have to look for a new password manager.
• SubiculumCode 6y ago
  I was worried when LastPass was bought up by LogMeIn, but stuck with it. Then LastPass tripled the price. I went from a premium to a free tier user. Now LastPass pulls this, and now I'm not even a user. Hello premium BitWarden.
• jhwhite 6y ago
  If I'm going to pay for a password manager I'm going to pay for 1Password.
  • TillE 6y ago
    That's where I'm at right now, as a long time free user of LastPass. I've never been particularly happy with it, but it basically works and it didn't cost anything. Now I get to evaluate the whole range of options available, and I doubt LastPass will come out on top.
• ketzo 6y ago
  I can't tell you how bizarre it is to me that despite there being four different (quite popular!) offerings in the password manager space, there's not one that really offers, to me, what I would call even a competent UI/UX. From personal experience, this is my ranking of the Big Four in terms of "does it just fucking work every time I press the button": 1. LastPass 2. 1Password 3. Bitwarden .. .. .. .. 15. KeePass As a result, I use LastPass. It's fine. It works perfectly about 80% of the time. I'll probably end up upgrading to Premium with this change. I'm fine with their current offer of $2.25/mo billed annually -- I definitely get more value than that out of the software given the amount of passwords I generate/save/retrieve on a daily basis. But even LastPass has what I personally consider a deeply unreliable UI! About 1 in 3 times I open the Chrome extension, it just.... doesn't work? It's absolutely wild to me. It's nuts, man! Maybe I'm just a frontend developer, so I get extra crotchety about shitty frontends. But c'mon! It's a consumer grade product that you interact with almost entirely through a 200x400px window. And that window doesn't respond to mouse hover half the goddamn time. Anyway. </rant>
• avipars 6y ago
  time to switch to bitwarden
• ptmcc 6y ago
  This is going to backfire for LastPass I think. It has stayed stagnant for years and performance has slowly degraded despite my devices getting much faster. When it was free it was easy to stick with it despite its flaws because of momentum. But now that I'm being forced to pay I'm going to do some cross-shopping and I really doubt LP is going to come out on top. I'm totally willing to pay, but my expectations are higher as a paying customer.
• adur1990 6y ago
  Anyone considering pass (https://www.passwordstore.org/ https://www.passwordstore.org/)? It is written in bash and uses gpg to store credetials on disk. And it is developed by the same guy behind wireguard. Also completely FOSS. On iOS I use passforios (https://github.com/mssun/passforios https://github.com/mssun/passforios) and on macOS I am the developer of Pass for macOS (https://github.com/adur1990/Pass-for-macOS https://github.com/adur1990/Pass-for-macOS) which is a wrapoer for pass containing a Safari extension. Sync across devices is done using git (or cloud drives if you prefer). I use this setup for multiple years now and it works really well.
  • drwu 6y ago
    I was(am) a happy user until once I need to grep..
  • kelvie 6y ago
    I also use this, and with the android app on f-droid (requires that you install a GPG app though). I sync it with a private gitlab repo and it's been working great for years.
  • zwog 6y ago
    My problem with passwordstore is that it's just not convenient to add passwords (via browser). With Bitwarden or KeepassXC the extension offers to store the login data when I sign up or use one login for a first time. With pass i have to do it manually which isn't hard or does take long, but it's still additional work. I ended up using KeepassXc with keepmenu[0] as a script for roffi/demnu 0: https://github.com/firecat53/keepmenu https://github.com/firecat53/keepmenu
• didibus 6y ago
  I used to be a payed subscriber, and then they made all the features I used free. For some reason, it frustrated me that they made it free, because I felt they were now gunning for some monetization scheme, where I'd rather they just focused on an affordable sustainable offering.
  • jzl 6y ago
    Agreed, a lot of mixed messaging from them over the last few years. I also used to happily pay the $12/year for mobile access but they strangely got rid of that requirement and added no value to the paid version. I'm just gonna pay the $36/year at this point because I don't feel like disrupting my working password system. But it feels like dating a person who doesn't know what they want.
• jimmar 6y ago
  LastPass has failed to launch on my mobile phone too many times recently for me to trust it. This change to their service is the impetus I needed to finally switch.
• jve 6y ago
  So many "I've migrated to bitwarden lately" comments. I'm in the same boat. Was a paying customer to LastPass. Price increase played part of why I switched.
• bschne 6y ago
  This is such an odd choice of pricing model. The usual approach is to say you get multi-device sync as part of a paid plan and single-device usage for free, or to place an upper limit on the device count, not count of types of devices. My guess is that they want to limit functionality enough to make paid plans attractive, while still giving you the chance to try out how the sync works, but I can't help asking myself if this isn't unnecessarily confusing and going to put potential customers off as opposed to e.g. offering a 30-day trial on their paid plans.
  • path411 6y ago
    It's them trying to go backwards. Originally free only worked on desktop. When they allowed mobile on free, a lot of people cancelled their premium. The other really crappy part, premium was only $12 then. I don't really see modern lastpass as 3x more valuable then it was then. I think they are just betting on enough people staying because people are too scared to swap
• account-5 6y ago
  Never used lastpass and never would. Wife does and now I have to go about setting her up a keepass db and a way of syncing between her phone and chromebook. This is a prime example of why I never use these sorts of companies. Always comes down to money eventually.
• m000 6y ago
  LastPass seem to be shooting themselves in the foot with their irrational and inconsistent pricing. - A few years back, their free/premium tiers were looking similar to what they announced today. Only they charged a mere $15/year for premium, which I gladly paid. - Then, overnight, they offered syncing across all types of devices for their free tier. The premium tier was only adding some niche features. I would have continued to pay $15/year just to support them, but at the same time they bumped up premium to $36/year. That was a deal-breaker: not paying 2.5x for features I don't use. - Now, they switch back to not syncing across all types of devices, but the premium price stays $36/year. If LastPass was the only game in town, they might get away with it. But there are at least two competitors, against which LastPass doesn't compare favourably: 1Password costs about the same, but is more refined. Bitwarden is a bit less refined, but is cheaper. I'm not dissatisfied with the LastPass product itself. But having to keep up with radical policy changes every few years largely negates any positive experience.
  • deleted 6y ago
    [deleted]
  • WheelsAtLarge 6y ago
    I bet they are counting on the lock-in factor. It might be worth it to just pay the fee rather than to go through the pain of switching.
    • imvictor 6y ago
      Logins data on LastPass can be exported to 1Password, just not straightforward. I did that, not going back to LastPass anymore.
  • HaoZeke 6y ago
    I'm surprised Enpass doesn't get mentioned more. Though the UI recently took a huge hit because of an asinine pwned password checker.
    • m000 6y ago
      Thanks for the pointer. First time I hear about Enpass. The UI looks nice, but I still don't get their company model. Data are stored on a third party cloud provider of your choice, so why is Enpass subscription-based? I surmise that paying removes some sort of ads from the apps, but I can't tell for sure. If that's the case, I'll have to pass.
• elfchief 6y ago
  Everybody is mentioning Bitwarden as a replacement, but what about Dashlane? I've had my eye on Dashlane for a while, and it seems on-par with lastpass, so I'm confused why it isn't mentioned in this discussion more. (to be clear: this is a genuine question, not an attempt to stealth-shill for Dashlane)
  • forty 6y ago
    Let me know what you think if you ever try :) I sometimes wish we were more often mentioned here (thanks btw :) ). I guess that we are missing some features that the audience here requires (for example being open source?).
  • pseudalopex 6y ago
    Bitwarden is open source. Dashlane's free plan is limited to 1 device. Does Dashlane have any advantages over Bitwarden?
• ghego1 6y ago
  As a LastPass user I must say that this change makes total sense, and tbh I was expecting it. However, after many years using their services, this change is the motivation I needed to switch to Dropbox passwords. I'm a (happy) paying customer of Dropbox. When they announced the passwords service I was interested, but I had no true motivation to make the switch, since LastPass was free and working fine for me. After reading this I finally made the switch. I must say it took me 10 minutes tops. The devs at Dropbox did make a very nice onboarding experience. And also kudos to LastPass for making it very simple to export everything in csv, which is easily importable to Dropbox passwords.
• kureikain 6y ago
  I have migrate from lastpass -> bitwarden. Coulnd't be happier. However, bitwarden cannot import data from lastpass csv. If you are havy lastpass user with custom fields, long note, than it can fail on free bitwarden tier(limit 1000 characters). I ended up code a Ruby script that shell out to BitWarden CLI to import them. Put this up here in case anyone needs it https://gist.github.com/v9n/ae05edd9dba16df503b5b2c0b11e8c04 https://gist.github.com/v9n/ae05edd9dba16df503b5b2c0b11e8c04
• Postosuchus 6y ago
  It's quite sad how the same old story unveils: an agile company with a great product and large community sells off to a large corporation, which destroys both the community and the product on its quest to squeeze more ROI... About 3 years ago, having been fed with regular price hikes without any good reason and/or new features, I switched to 1Password and never looked back.
• deleted 6y ago
  [deleted]
• tamiral 6y ago
  this is ridiculous
• vkaku 6y ago
  We wanted to move away from Lastpass, so we wanted to make own offline vault (and remove the need to maintain any extra servers and subscriptions). https://github.com/guilt/groupenc https://github.com/guilt/groupenc Suggestions welcome.
• D-Nice 6y ago
  Speaking of competitors and alternatives to this. I've used a version of my own for years, and have recently started working on a FOSS password generator and manager, called SrsPass. Would love feedback on it, and it has an open-spec so you don't need to dig into the code itself to at least get a high-level overview of how it works, and at same time give anyone else the power to reimplement the spec: https://app.srspass.com https://app.srspass.com for the app available as PWA https://docs.srspass.com/tech/ https://docs.srspass.com/tech/ for a tech overview I have received complaints about the current unskippable setup process being somewhat cumbersome, and one of the things on the top of the list to improve that experience is allowing a quick setup, essentially postponement of saving the backup phrase to a later time, albeit I'm deliberating a safe implementation of it.