4 ms·

Time to migrate from lastPass Any good alternatives?

TheChaplain 5y ago
I use Bitwarden and have no complaints so far. But being a bit paranoid the most important passwords I keep in a KeePass-file on a USB.
- RamRodification 5y ago
  A USB what? Don't leave us hanging.
  - tuwtuwtuwtuw 5y ago
    Mouse. He stores them in his USB mouse on a piece of paper. No one would look in his mouse.
    - piaste 5y ago
      Many modern mice have onboard memory, actually, to store sensitivity settings and occasionally macros. I doubt they need more than a few kb's for them, but being 2021, maybe the cheapest onboard memory chip can still hold 16MB or more, and a sufficiently cunning hacker could use it as a storage of last resort.
- wruza 5y ago
  And I have. “Lock now” function is hidden among other items in the settings menu, when it must be accessible. Editing and using password cards is far from intuitive, and their entire autogenerated(?)/tabled(?) UI feels off in ways hard to describe. I’m constantly getting confused using it. And it is not a baby duck syndrome, as I am using it for more than two years. There is still no better alternative if you want to leave lastpass, but what lastpass really has is a good UI.
  - madspindel 5y ago
    > There is still no better alternative if you want to leave lastpass, but what lastpass really has is a good UI. 1Password. Love the Chrome extension UI coupled with the desktop app. Way better than Bitwarden in my opinion.
ghosty141 5y ago
Why migrate? It seems like there isnt a problem with Lastpass itself. Apart from that: bitwarden.
- tmikaeld 5y ago
  There’s two options: 1. they found the breach and patched it, lies about it to save face. 2. there was no breach Even if it’s option two, would you want to gamble on it?
  - jamespo 5y ago
    Because most users will have an inferior setup to Lastpass
    - willis936 5y ago
      Most of the effort is in moving off an insecure set of passwords. The details of the solution don't add much incremental effort. Why not do it the right way and avoid trusting a company with an awful track record? Everyone I know has a google account and a smartphone, and by extension access to google drive for cloud backup/sync of a keepass database. Lastpass cannot justify its existence.
  - londons_explore 5y ago
    Option 3:. There was a breach, but lastpass didn't keep enough logs to know that anything went wrong.
  - NikolaNovak 5y ago
    Me as a still somewhat techie individual? No, keepass works just fine. But you have to realistically consider what are actual alternatives. For everybody else in my family, it's not lastpass vs some cryptographycally excellent local solution. It's last pass or 1password as uphill battle vs same password of your cats name over all of your accounts. Shared by your family members. My sister in law doesn't even have to wonder what her mom's utility or bank password is - they all literally use their old dead cat's name. For everything. So moving them to Lastpass or 1password with differentiated passwords has been my life's mission for past several years. they are the norm. Average HN poster is empathically not :-/
zapdrive 5y ago
I have a NextCloud server for backing up and syncing my personal data. I use the PassMan plugin to store my passwords. The user interface could really use some work. Other than that it's really good.
rad_gruchalski 5y ago
Bitwarden is really nice.
feistypharit 5y ago
Self hosted bitwarden (well, vault warden) is pretty good. With a lot of passwords (600) the browser extension is a little slow, but not bad. I left 1password once they moved to cloud and subscriptions and haven’t missed it. Plus, set hosted BW gets you all the premium features, like shared vaults for the wife and family.

I use Bitwarden and have no complaints so far. But being a bit paranoid the most important passwords I keep in a KeePass-file on a USB.

RamRodification 5y ago
A USB what? Don't leave us hanging.
- tuwtuwtuwtuw 5y ago
  Mouse. He stores them in his USB mouse on a piece of paper. No one would look in his mouse.
  - piaste 5y ago
    Many modern mice have onboard memory, actually, to store sensitivity settings and occasionally macros. I doubt they need more than a few kb's for them, but being 2021, maybe the cheapest onboard memory chip can still hold 16MB or more, and a sufficiently cunning hacker could use it as a storage of last resort.
wruza 5y ago
And I have. “Lock now” function is hidden among other items in the settings menu, when it must be accessible. Editing and using password cards is far from intuitive, and their entire autogenerated(?)/tabled(?) UI feels off in ways hard to describe. I’m constantly getting confused using it. And it is not a baby duck syndrome, as I am using it for more than two years. There is still no better alternative if you want to leave lastpass, but what lastpass really has is a good UI.
- madspindel 5y ago
  > There is still no better alternative if you want to leave lastpass, but what lastpass really has is a good UI. 1Password. Love the Chrome extension UI coupled with the desktop app. Way better than Bitwarden in my opinion.

ghosty141 5y ago

Why migrate? It seems like there isnt a problem with Lastpass itself. Apart from that: bitwarden.

tmikaeld 5y ago
There’s two options: 1. they found the breach and patched it, lies about it to save face. 2. there was no breach Even if it’s option two, would you want to gamble on it?
- jamespo 5y ago
  Because most users will have an inferior setup to Lastpass
  - willis936 5y ago
    Most of the effort is in moving off an insecure set of passwords. The details of the solution don't add much incremental effort. Why not do it the right way and avoid trusting a company with an awful track record? Everyone I know has a google account and a smartphone, and by extension access to google drive for cloud backup/sync of a keepass database. Lastpass cannot justify its existence.
- londons_explore 5y ago
  Option 3:. There was a breach, but lastpass didn't keep enough logs to know that anything went wrong.
- NikolaNovak 5y ago
  Me as a still somewhat techie individual? No, keepass works just fine. But you have to realistically consider what are actual alternatives. For everybody else in my family, it's not lastpass vs some cryptographycally excellent local solution. It's last pass or 1password as uphill battle vs same password of your cats name over all of your accounts. Shared by your family members. My sister in law doesn't even have to wonder what her mom's utility or bank password is - they all literally use their old dead cat's name. For everything. So moving them to Lastpass or 1password with differentiated passwords has been my life's mission for past several years. they are the norm. Average HN poster is empathically not :-/

zapdrive 5y ago

I have a NextCloud server for backing up and syncing my personal data. I use the PassMan plugin to store my passwords. The user interface could really use some work. Other than that it's really good.

rad_gruchalski 5y ago

Bitwarden is really nice.

feistypharit 5y ago

Self hosted bitwarden (well, vault warden) is pretty good. With a lot of passwords (600) the browser extension is a little slow, but not bad. I left 1password once they moved to cloud and subscriptions and haven’t missed it. Plus, set hosted BW gets you all the premium features, like shared vaults for the wife and family.