3 ms·
Several years ago, I chose LastPass, bought it, and did all the set up. Then they were acquired by someone I didn't trust, so I immediately switched to 1Passwor
by jeffrallen 5y ago
Several years ago, I chose LastPass, bought it, and did all the set up. Then they were acquired by someone I didn't trust, so I immediately switched to 1Password, and never regretted it for a second. If 1Password sold out, I'd switch again, in a second.
- jjav 5y agoWhile this is a good approach at a high level, it's also worth pointing out that the usage should not be based on trust. You should evaluate if you're comfortable using this or that password manager even if they were aquired by the most evil company you can think of. If the design is solid, it shouldn't matter since the evil company shouldn't be able to compromise anything. If it does matter, then you shouldn't be using that software no matter how much you trust the company (because regardless of trust, they're still subject to secret court orders etc.)
- jeffrallen 5y agoYes, but password manager vendors seem to insist on moving towards cloud subscriptions, instead of "buy it once and you host it", which means you are somewhat dependent on them. If 1Password keeps pushing this direction and makes Dropbox sync stop, I'm SO outta there.
- CamelRocketFish 5y agoThe problem is we don’t have access to the design as it’s closed source?
- jjav 5y agoThat is certainly a factor to consider in the decision! I, for one, wouldn't use any security-critical software where the client isn't open source. (The server side doesn't matter for security for the same reason trust in the company shouldn't matter. No secrets should leak to the server.)