10 ms·

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everyw

I'm a big fan of 1Password. I've been paying for it for years. A few years ago I got my partner setup in a few minutes and now they have strong passwords everywhere. Its got great features for sharing vaults with other people so I've got password managers setup for the kids too. My partner and I both have personal vaults, we have a shared vault for financial stuff, and a shared vault for our media accounts (that we share with the kids too) I get that people bristle about SaaS subscriptions in their personal life but the $60/year it costs is well worth it. The research shows that strong passwords and limiting re-use is extremely effective at preventing account compromises and 1Password makes this dead simple. The thing that finally made it an incredible app was when Apple finally allowed 3rd party password management in iOS. Yes there might be better password managers out there and they might have better security. However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux.

progx 5y ago
Bitwarden https://bitwarden.com/ https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for 1password for linux and switched last year to bitwarden. Family Account for 6 Users ($40 per year)
- bitlevel 5y ago
  Moving from 1Password to Bitwarden was the best thing I did. Bitwarden enabled me to use it with Linux, Mac, Windows, Web, etc. _years_ before 1Password decided to join the party. And there's no subscription to speak of - just a premium "extra features you may or may not want" yearly payment, which works out _much_ cheaper. Finally - all my passwords belong to me. Self hosted server means that I keep control, not some random cloud.
  - throwaway8581 5y ago
    Since Bitwarden is end-to-end encrypted, the risk isn't who hosts the data but who controls chrome extension and App Store updates. Bitwarden's servers being compromised would cause you no harm except data loss, but a malicious client update could steal all of your passwords.
    - sildur 5y ago
      That is why you should never ever auto-update your add-ons.
- pier25 5y ago
  Bitwarden is awesome. It's my current password manager after I left 1P. I spent hundreds into 1P before the subscription model, as their apps were expensive and got them on multiple OS and for family members. Then Dropbox decided (rightfully) that you shouldn't use your public folder to host websites, and 1P told their customers to either get a subscription or lose the online vault which is a critical feature of any password manager. They didn't even have the decency to offer a free year of the subscription to their current paying customers. It would have cost 1P pennies to just host the vaults on S3, but they decided to force their customers to switch to the subscription model if they wanted to have a feature they had already paid for and 1P had been advertising for years. I will never give a single cent to 1P again.
  - JohnWhigham 5y ago
    You're getting downvoted, but this is all true and shouldn't be discounted. I'm in the process of migrating off 1Password after their shitty behavior of all but forcing people to migrate to the cloud.
  - signal11 5y ago
    I started with 1Password 4 (non-subscription) and considered upgrading to 1Password 7 -- yes, you could buy a non-subscription copy when I checked, although it's increasingly well hidden as an option -- and in addition to Dropbox it may have supported iCloud, not sure about that. In the end I went with the subscription because I it's bought once for all my devices, and is great for family use, with UX that's easy from children to grandparents. As a bonus, the Dropbox sync issues just stopped - their own sync works much better for me. I do understand the frustration about subscriptions for everything but I'd like my password manager vendor to remain in good financial health, so I'll happily make an exception and pay regularly for my password manager. > just host the vaults on S3 That's a fairly niche audience, and it's very easy to misconfigure S3. Product development is about making hard choices, and I'm ok with 1Password choosing not to do this, just as I'm okay with them not supporting WebDAV -- YMMV. What I do wish is that 1Password would support a few cloud storage options (e.g. Google Drive, OneDrive etc) on mobile so that people who're not inclined to subscribe have an alternative, if only to squelch the inevitable complaints about subscriptions. When 1Password was a smaller company, I can see why one wouldn't want to do that as it'd take away precious dev time, but my understanding is that they have more funding now.
- lukevp 5y ago
  Bitwarden is awesome, and super easy to self host with Docker. Heck, you could get a $5/mo DO droplet and host bitwarden_rs along with a static site or a bunch of other things! I wouldn’t suggest this to people who are unfamiliar with hosting, Linux, docker, and how to make backups, so the self hosting is admittedly limited in appeal, but even their SaaS offering seems like a great deal!
  - jacurtis 5y ago
    Bitwarden is a great alternative. But it must be mentioned that you need to be willing to accept the responsibility and burden of the operational overhead required to run it. I realize that most people tout self-hosted as a "benefit", and it might be a benefit for the demographic reading HN. But for the average person, self-hosting is far from practical. Most people can't realistically boot up a DO droplet and install Docker and Bitwarden. Heck, I am a SysAdmin as a career. I build highly available architecture all day long, but for my personal/family passwords it is honestly not something I personally want to handle. Maybe it is because I actually work in highly available architectures all day long that I am more fearful of throwing all my passwords onto a $5/mo DO droplet, that by its nature is not HA. Sure I have the expertise to lock it down, keep it secure, keep it backed up, keep it updated, etc.. But I am paying $60/yr for the VPC ($5/mo x 12 mos = $60/yr), which is the same cost as 1Password for a Family plan and is more expensive than the $36 they charge for a personal plan. So even though I am qualified to reliably self-host everything, why would I want to? Why not just pay the same amount of money for someone else to accept that burden? Plus that company is scaled up to be running their customers on far more reliable architecture systems than I would alternatively be using on my single VPC/droplet. This isn't to shit on Bitwarden. In fact i have a ton of experience with both Bitwarden and 1Password. These are easily the two best options on the market. Both have close to feature parity. You can't go wrong with either. But I would just cautiously warn people that want to self-host Bitwarden. This is a major responsibility to self-host an app that contains such critical information. Before you click install I would do a thought experiment of what would happen if you lost your Bitwarden installation, and therefore ALL of your unique passwords across the entire internet. Now ask yourself, how confident are you that you can avoid that situation. Then remember that affordable alternatives exist that take that responsibility away from you. This isn't saying that you shouldn't do it. Just that it isn't practical for most people. And I honestly don't see the draw for self-hosting a personal or family account. I would self-host a business account. But why bother with personal or family? Just get a hosted account so you don't have to play "IT Person" at home when your partner gets locked out of Netflix and can't access the password.
- bognition 5y ago
  Its really great to hear how far Bitwarden has come. I love that there are multiple viable competitors in this space.
- benhurmarcel 5y ago
  Bitwarden is a great option. It has all the features you could need, and is cheaper (and critically has a free plan). That's basically my default recommendation for most people. I know most people won't consider anything other than free. I still choose to use 1Password personally, because the higher polish and experience is worth the slightly higher price for me. Both are good options really.
- veidr 5y ago
  How good is Bitwarden on iOS? — curious 1Password user
  - ybbond 5y ago
    Very nice! The UI is not pretty, but the UX surely is great. Bitwarden also provides true black theme for OLED. Website auto-detect key works well on Safari, but hit-and-miss on other browser (just like 1P is—or was). -- former 1Password user
- InafuSabi 5y ago
  I had to reduce #Lastpass importance here, when they crippled the multiple plaform usability so my natural choice was #Bitwarden. THe fact that they are open source and will not pull such a stunt as lastpass did was vital for me. Lastpass is now reduced to usage on linux machines, while bitwarden superceeds it on all platforms, even when new ones come in the future
yohannparis 5y ago
And, for people who cares like me, they are based in Toronto, Ontario, Canada. I like to support an excellent Canadian product!
IndySun 5y ago
6 years old and already having to navigate software, passwords, privacy. I am mildly shocked, and saddened. Or am I just behind the times?
- f6v 5y ago
  > 6 years old and already having to navigate software, passwords, privacy. If he’s in the US, he already needs to start saving for college.
- Milner08 5y ago
  Really? I was using the computer at 6, although basic stuff in DOS (I remember being proud I knew how to start games etc). At 6 you're in primary school in the UK and using a computer and internet safety is definitely a big thing. Not sure why you'd be saddened by this? Its not like its a black and white you either play outside or you use the computer thing. People can do both and learning about technology early is a good thing.
  - IndySun 5y ago
    >Not sure why you'd be saddened by this? I did all that too. I concur with your overview. I don't see the world as black and white either. We know that children are more easily exploited, no matter how tech savvy, but it's not so much the 6 year old age that hit me reading that; it's the fact the having an offline private life is being eroded, and I'm not sure about what is replacing it.
  - IndySun 5y ago
    This recent article appeared on YC, it expands on the sleepwalking folly of digital ids and passwords. https://www.aclu.org/report/identity-crisis-what-digital-drivers-licenses-could-mean-privacy-equity-and-freedom https://www.aclu.org/report/identity-crisis-what-digital-dri...
- jandrese 5y ago
  Malware bots on the Internet don't care how old you are. If the kids are on there (all of their friends already play Roblox and talk about it incessantly) then they need to have the same level of password security and care with personal data than an adult does. The last thing a 6 year old needs is some asshole opening a dozen credit cards in their name and maxing them out on cash advances to buy Bitcoin.
x3n0ph3n3 5y ago
I used to be a strong advocate of 1Password, but I was also using Syncthing to synchronize my password database to multiple devices. 1Password basically killed support for that because they want people to pay for their SaaS offering. I ultimately switched to self-hosted Bitwarden and have been much happier with it.
vmception 5y ago
Sidenote: 1password has no way of knowing if I am materially affected by a site breach, and its notifications about a site being breached annoy me
- octorian 5y ago
  The functional uselessness of ALL site breach notifications from EVERYONE who will send them to you is something that pisses me off to no end. "Your Email was found in the data dump from the FooBarBaz.NET hack!" Okay, which site was this? Is there a password I'm supposed to change? Was it actually a password I stopped using 5 years ago, but is still floating out there somewhere? None of these questions are ever answered in a way that's actionable, so these notices get effectively ignored. (FWIW, back when I worked at a certain big company and they provided this service to employees, the data dumps actually did contain enough useful info to answer the questions some of the time. But the services available to the general public, even if you pay for them, are damn near useless.)
  - vmception 5y ago
    Exactly, also, many times I aliased the sign up email or otherwise made the username unique. And I already have unique password, so there just isn't anything to care about for 99% of services.
  - pseudalopex 5y ago
    > Okay, which site was this? The site it said it was? > Is there a password I'm supposed to change? Do you have a password saved or memorized? Does the site have a link or form to log in? > Was it actually a password I stopped using 5 years ago, but is still floating out there somewhere? They can't be sure. Why not change it to be safe?
    - octorian 5y ago
      >> Okay, which site was this? >The site it said it was? I'm sorry, but I have absolutely no idea what sites fall under the banner of the "FooBarBaz.NET" dark web data dump.
rvz 5y ago
> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux. I'm afraid Dashlane fits all of those requirements. Hands down. Then Bitwarden comes second.
satysin 5y ago
I setup Bitwarden for my mother and step-father last year as it is free for basic use and they don't care for any of the advanced features. While the UX of Bitwarden isn't quite as polished neither have had any issues. They use it on their Windows laptops and Android phones just fine. I think the fact my mother hasn't asked me to help her with her Facebook password for over a year now speaks volumes over how well it works for her :) 1Password is indeed a superb product though. I do like to chime in when password managers are mentioned to help spread awareness of Bitwarden as they don't have the same level of marketing as 1Password and I appreciate that Bitwarden is open source and all that jazz :)
74B5 5y ago
> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux. I have my keepass vault in my dotfiles repository. All i need on any device is keepass and if i want to write to that vault, git. Of course i secured my publically accessible vault with a strong password and an additional token. Works fine for me but i have to admit, using a lot of devices with write access to that vault would get cumbersome.
- theon144 5y ago
  Good luck explaining the concept of a "dotfile" and "git" to a 6 year old, I guess...
  - nerdponx 5y ago
    Back it up in Dropbox or whatever instead...
rkeene2 5y ago
I think we should move away from passwords entirely, the UX for that is often much better for users (and as a bonus, you don't need to worry about your password being compromised, or password managers).
- itisit 5y ago
  What is the alternative you propose?
  - rkeene2 5y ago
    I think the universe is slowly standardizing on WebAuthn/U2F for this. The US Government got rid of passwords in 2004 by switching to smartcards, and Google also did so in 2017 by switching to hardware security tokens.
    - itisit 5y ago
      That’s fine for tech businesses with dedicated IT support, but what about consumers?
      - rkeene2 5y ago
        Use what Google builds, which will likely (as I mentioned) be WebAuthn based
  - harveywi 5y ago
    Hard drives are large enough nowadays to contain a whole copy of the internet. Instead of connecting to the internet to access the web, computers should serve up local copies of the sites instead. Then it is 100% secure and there is no more need for passwords or insecure WiFi connections.
    - paxys 5y ago
      1. No they are not 2. The core problem is still that you need to be able to communicate with others, for which you need to identify yourself. Where a site is served from doesn't change that.
qq4 5y ago
What does 1Password do better than LastPass? I pay nothing and I don't feel like any features are missing.
- evad3r 5y ago
  Nothing off the top of my head, I think people jumped ship off LastPass when they were bought out by LogMeIn. I know they chopped and changed what you could get between the free and premium versions a while ago.
  - qq4 5y ago
    I didn't know they were acquired. I'm looking to migrate, but nothing jumps out as better.
fukmbas 5y ago
KeePass is free and we all already pay for some type of cloud storage (gdrive, itunes etc). Combine with your own encryption method to compress, forget about pass

progx 5y ago

Bitwarden https://bitwarden.com/ https://bitwarden.com/ Has clients for all platforms, open source, self hosting or free plans and saas. Waited long time for 1password for linux and switched last year to bitwarden. Family Account for 6 Users ($40 per year)

bitlevel 5y ago
Moving from 1Password to Bitwarden was the best thing I did. Bitwarden enabled me to use it with Linux, Mac, Windows, Web, etc. _years_ before 1Password decided to join the party. And there's no subscription to speak of - just a premium "extra features you may or may not want" yearly payment, which works out _much_ cheaper. Finally - all my passwords belong to me. Self hosted server means that I keep control, not some random cloud.
- throwaway8581 5y ago
  Since Bitwarden is end-to-end encrypted, the risk isn't who hosts the data but who controls chrome extension and App Store updates. Bitwarden's servers being compromised would cause you no harm except data loss, but a malicious client update could steal all of your passwords.
  - sildur 5y ago
    That is why you should never ever auto-update your add-ons.
pier25 5y ago
Bitwarden is awesome. It's my current password manager after I left 1P. I spent hundreds into 1P before the subscription model, as their apps were expensive and got them on multiple OS and for family members. Then Dropbox decided (rightfully) that you shouldn't use your public folder to host websites, and 1P told their customers to either get a subscription or lose the online vault which is a critical feature of any password manager. They didn't even have the decency to offer a free year of the subscription to their current paying customers. It would have cost 1P pennies to just host the vaults on S3, but they decided to force their customers to switch to the subscription model if they wanted to have a feature they had already paid for and 1P had been advertising for years. I will never give a single cent to 1P again.
- JohnWhigham 5y ago
  You're getting downvoted, but this is all true and shouldn't be discounted. I'm in the process of migrating off 1Password after their shitty behavior of all but forcing people to migrate to the cloud.
- signal11 5y ago
  I started with 1Password 4 (non-subscription) and considered upgrading to 1Password 7 -- yes, you could buy a non-subscription copy when I checked, although it's increasingly well hidden as an option -- and in addition to Dropbox it may have supported iCloud, not sure about that. In the end I went with the subscription because I it's bought once for all my devices, and is great for family use, with UX that's easy from children to grandparents. As a bonus, the Dropbox sync issues just stopped - their own sync works much better for me. I do understand the frustration about subscriptions for everything but I'd like my password manager vendor to remain in good financial health, so I'll happily make an exception and pay regularly for my password manager. > just host the vaults on S3 That's a fairly niche audience, and it's very easy to misconfigure S3. Product development is about making hard choices, and I'm ok with 1Password choosing not to do this, just as I'm okay with them not supporting WebDAV -- YMMV. What I do wish is that 1Password would support a few cloud storage options (e.g. Google Drive, OneDrive etc) on mobile so that people who're not inclined to subscribe have an alternative, if only to squelch the inevitable complaints about subscriptions. When 1Password was a smaller company, I can see why one wouldn't want to do that as it'd take away precious dev time, but my understanding is that they have more funding now.
lukevp 5y ago
Bitwarden is awesome, and super easy to self host with Docker. Heck, you could get a $5/mo DO droplet and host bitwarden_rs along with a static site or a bunch of other things! I wouldn’t suggest this to people who are unfamiliar with hosting, Linux, docker, and how to make backups, so the self hosting is admittedly limited in appeal, but even their SaaS offering seems like a great deal!
- jacurtis 5y ago
  Bitwarden is a great alternative. But it must be mentioned that you need to be willing to accept the responsibility and burden of the operational overhead required to run it. I realize that most people tout self-hosted as a "benefit", and it might be a benefit for the demographic reading HN. But for the average person, self-hosting is far from practical. Most people can't realistically boot up a DO droplet and install Docker and Bitwarden. Heck, I am a SysAdmin as a career. I build highly available architecture all day long, but for my personal/family passwords it is honestly not something I personally want to handle. Maybe it is because I actually work in highly available architectures all day long that I am more fearful of throwing all my passwords onto a $5/mo DO droplet, that by its nature is not HA. Sure I have the expertise to lock it down, keep it secure, keep it backed up, keep it updated, etc.. But I am paying $60/yr for the VPC ($5/mo x 12 mos = $60/yr), which is the same cost as 1Password for a Family plan and is more expensive than the $36 they charge for a personal plan. So even though I am qualified to reliably self-host everything, why would I want to? Why not just pay the same amount of money for someone else to accept that burden? Plus that company is scaled up to be running their customers on far more reliable architecture systems than I would alternatively be using on my single VPC/droplet. This isn't to shit on Bitwarden. In fact i have a ton of experience with both Bitwarden and 1Password. These are easily the two best options on the market. Both have close to feature parity. You can't go wrong with either. But I would just cautiously warn people that want to self-host Bitwarden. This is a major responsibility to self-host an app that contains such critical information. Before you click install I would do a thought experiment of what would happen if you lost your Bitwarden installation, and therefore ALL of your unique passwords across the entire internet. Now ask yourself, how confident are you that you can avoid that situation. Then remember that affordable alternatives exist that take that responsibility away from you. This isn't saying that you shouldn't do it. Just that it isn't practical for most people. And I honestly don't see the draw for self-hosting a personal or family account. I would self-host a business account. But why bother with personal or family? Just get a hosted account so you don't have to play "IT Person" at home when your partner gets locked out of Netflix and can't access the password.
bognition 5y ago
Its really great to hear how far Bitwarden has come. I love that there are multiple viable competitors in this space.
benhurmarcel 5y ago
Bitwarden is a great option. It has all the features you could need, and is cheaper (and critically has a free plan). That's basically my default recommendation for most people. I know most people won't consider anything other than free. I still choose to use 1Password personally, because the higher polish and experience is worth the slightly higher price for me. Both are good options really.
veidr 5y ago
How good is Bitwarden on iOS? — curious 1Password user
- ybbond 5y ago
  Very nice! The UI is not pretty, but the UX surely is great. Bitwarden also provides true black theme for OLED. Website auto-detect key works well on Safari, but hit-and-miss on other browser (just like 1P is—or was). -- former 1Password user
InafuSabi 5y ago
I had to reduce #Lastpass importance here, when they crippled the multiple plaform usability so my natural choice was #Bitwarden. THe fact that they are open source and will not pull such a stunt as lastpass did was vital for me. Lastpass is now reduced to usage on linux machines, while bitwarden superceeds it on all platforms, even when new ones come in the future

yohannparis 5y ago

And, for people who cares like me, they are based in Toronto, Ontario, Canada. I like to support an excellent Canadian product!

IndySun 5y ago

6 years old and already having to navigate software, passwords, privacy. I am mildly shocked, and saddened. Or am I just behind the times?

f6v 5y ago
> 6 years old and already having to navigate software, passwords, privacy. If he’s in the US, he already needs to start saving for college.
Milner08 5y ago
Really? I was using the computer at 6, although basic stuff in DOS (I remember being proud I knew how to start games etc). At 6 you're in primary school in the UK and using a computer and internet safety is definitely a big thing. Not sure why you'd be saddened by this? Its not like its a black and white you either play outside or you use the computer thing. People can do both and learning about technology early is a good thing.
- IndySun 5y ago
  >Not sure why you'd be saddened by this? I did all that too. I concur with your overview. I don't see the world as black and white either. We know that children are more easily exploited, no matter how tech savvy, but it's not so much the 6 year old age that hit me reading that; it's the fact the having an offline private life is being eroded, and I'm not sure about what is replacing it.
- IndySun 5y ago
  This recent article appeared on YC, it expands on the sleepwalking folly of digital ids and passwords. https://www.aclu.org/report/identity-crisis-what-digital-drivers-licenses-could-mean-privacy-equity-and-freedom https://www.aclu.org/report/identity-crisis-what-digital-dri...
jandrese 5y ago
Malware bots on the Internet don't care how old you are. If the kids are on there (all of their friends already play Roblox and talk about it incessantly) then they need to have the same level of password security and care with personal data than an adult does. The last thing a 6 year old needs is some asshole opening a dozen credit cards in their name and maxing them out on cash advances to buy Bitcoin.

x3n0ph3n3 5y ago

I used to be a strong advocate of 1Password, but I was also using Syncthing to synchronize my password database to multiple devices. 1Password basically killed support for that because they want people to pay for their SaaS offering. I ultimately switched to self-hosted Bitwarden and have been much happier with it.

vmception 5y ago

Sidenote: 1password has no way of knowing if I am materially affected by a site breach, and its notifications about a site being breached annoy me

octorian 5y ago
The functional uselessness of ALL site breach notifications from EVERYONE who will send them to you is something that pisses me off to no end. "Your Email was found in the data dump from the FooBarBaz.NET hack!" Okay, which site was this? Is there a password I'm supposed to change? Was it actually a password I stopped using 5 years ago, but is still floating out there somewhere? None of these questions are ever answered in a way that's actionable, so these notices get effectively ignored. (FWIW, back when I worked at a certain big company and they provided this service to employees, the data dumps actually did contain enough useful info to answer the questions some of the time. But the services available to the general public, even if you pay for them, are damn near useless.)
- vmception 5y ago
  Exactly, also, many times I aliased the sign up email or otherwise made the username unique. And I already have unique password, so there just isn't anything to care about for 99% of services.
- pseudalopex 5y ago
  > Okay, which site was this? The site it said it was? > Is there a password I'm supposed to change? Do you have a password saved or memorized? Does the site have a link or form to log in? > Was it actually a password I stopped using 5 years ago, but is still floating out there somewhere? They can't be sure. Why not change it to be safe?
  - octorian 5y ago
    >> Okay, which site was this? >The site it said it was? I'm sorry, but I have absolutely no idea what sites fall under the banner of the "FooBarBaz.NET" dark web data dump.

rvz 5y ago

> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux. I'm afraid Dashlane fits all of those requirements. Hands down. Then Bitwarden comes second.

satysin 5y ago

I setup Bitwarden for my mother and step-father last year as it is free for basic use and they don't care for any of the advanced features. While the UX of Bitwarden isn't quite as polished neither have had any issues. They use it on their Windows laptops and Android phones just fine. I think the fact my mother hasn't asked me to help her with her Facebook password for over a year now speaks volumes over how well it works for her :) 1Password is indeed a superb product though. I do like to chime in when password managers are mentioned to help spread awareness of Bitwarden as they don't have the same level of marketing as 1Password and I appreciate that Bitwarden is open source and all that jazz :)

74B5 5y ago

> However show me an alternative with a UX that is simple enough for my 6 year old to use, that works on iOS, Android, MacOS, and now Linux. I have my keepass vault in my dotfiles repository. All i need on any device is keepass and if i want to write to that vault, git. Of course i secured my publically accessible vault with a strong password and an additional token. Works fine for me but i have to admit, using a lot of devices with write access to that vault would get cumbersome.

theon144 5y ago
Good luck explaining the concept of a "dotfile" and "git" to a 6 year old, I guess...
- nerdponx 5y ago
  Back it up in Dropbox or whatever instead...

rkeene2 5y ago

I think we should move away from passwords entirely, the UX for that is often much better for users (and as a bonus, you don't need to worry about your password being compromised, or password managers).

itisit 5y ago
What is the alternative you propose?
- rkeene2 5y ago
  I think the universe is slowly standardizing on WebAuthn/U2F for this. The US Government got rid of passwords in 2004 by switching to smartcards, and Google also did so in 2017 by switching to hardware security tokens.
  - itisit 5y ago
    That’s fine for tech businesses with dedicated IT support, but what about consumers?
    - rkeene2 5y ago
      Use what Google builds, which will likely (as I mentioned) be WebAuthn based
- harveywi 5y ago
  Hard drives are large enough nowadays to contain a whole copy of the internet. Instead of connecting to the internet to access the web, computers should serve up local copies of the sites instead. Then it is 100% secure and there is no more need for passwords or insecure WiFi connections.
  - paxys 5y ago
    1. No they are not 2. The core problem is still that you need to be able to communicate with others, for which you need to identify yourself. Where a site is served from doesn't change that.

qq4 5y ago

What does 1Password do better than LastPass? I pay nothing and I don't feel like any features are missing.

evad3r 5y ago
Nothing off the top of my head, I think people jumped ship off LastPass when they were bought out by LogMeIn. I know they chopped and changed what you could get between the free and premium versions a while ago.
- qq4 5y ago
  I didn't know they were acquired. I'm looking to migrate, but nothing jumps out as better.

fukmbas 5y ago

KeePass is free and we all already pay for some type of cloud storage (gdrive, itunes etc). Combine with your own encryption method to compress, forget about pass