10 ms·

I switched to Bitwarden when LastPass started using silly tactics to make customers pay. I didn't switch because of the price - the service pricing of Bitwarde

by bborud 4y ago

I switched to Bitwarden when LastPass started using silly tactics to make customers pay. I didn't switch because of the price - the service pricing of Bitwarden was a pleasant surprise. I switched because I lost all trust in LastPass. Managing credentials and sensitive information is all about trust. The second I lose trust in that kind of service, I don't just stop using it, I will most likely never even consider coming back as a customer and I will warn people against them. I don't give second chances to services that are trust based. I'm pretty happy with Bitwarden so far. But if they betray my trust I'll be out of there in a day, never to return. I switched from LastPass to Bitwarden in a day. LastPass never gets a second chance. What the VCs have to understand is that if their greed makes them push Bitwarden to engage in silly tactics, they risk driving away their customer base.

TheKarateKid 4y ago
LastPass pricing model is what turned me off. I am happy to pay for services I use regularly, but I remember the pricing model didn't seem appropriate for what they were offering. The short cutoff period added insult to injury. I checked out Bitwarden and it seemed like a better version of LastPass that just happened to be free. Their paid model doesn't appeal to me so I don't subscribe, but I would enjoy paying if they offered something that did. (Off-topic: Bitwarden seems like an exact LastPass clone all the way down to the UI. Do they share a similar codebase or something? Like was one forked from an OSS version of the other?)
- godelski 4y ago
  Same, I even remember paying for LastPass for a bit. It was more that I wanted to support a service I liked (same reason I pay for other services). Though I find BW's paid model a bit surprising. I know it is only $10/yr, but the only real value here is 1GB storage and yubi/fido keys. I don't have yubi keys (they seem cool but also a pain in the ass) and 1GB seems rather small. Looking at Google, Dropbox, and Apple, storage pricings range from 4GB/$ (Apple) to 20GB/$ (Google's 5+TB plans). I'm willing to bet that offering 5GB would make it more worthwhile and a very small fraction of your users would actually use it. What are you going to store? Your passport photo and driver's license? I wonder if there would be a psychological effect here because it is really hard to tell if 1GB is enough or not. At least your average person has no idea.
  - fencepost 4y ago
    One paid feature that can be very important is designating emergency access contacts. A family member had a stroke last year (doing much better now) and one thing that made life much easier was having access to his passwords - in this case because I'd set him up with Keepass years ago and still had the password saved.
dieselgate 4y ago
Dang changing a password manager seems like a nightmare. I use pen and paper which, given the trade offs, makes the most sense for me
- simsla 4y ago
  I thought it would be bad, but it didn't take long when I switched to BW from LP. Half an hour maybe? And that includes setting up Duo for push notification 2FA.
  - dieselgate 4y ago
    Oh that’s good to hear, glad it was straightforward
  - fencepost 4y ago
    There is one thing you lose when doing this, pretty sure password history is still not a part of the export.
- rstuart4133 4y ago
  Last I looked, Bitwarden data is a single JSON thingy (details are hazy now). I exported my existing passwords, converted the result to the JSON format using vim or something, and imported it. Job done.
fencepost 4y ago
I didn't mind paying for Lastpass, but I started planning to move away when they were bought by LogMeIn because I've seen that company's acquisitions before. Jumped from a paid LP plan to a Bitwarden family plan with sharing and emergency access and quite happy.
javajosh 4y ago
What specifically did they do to trick you into paying?
- hedora 4y ago
  https://en.m.wikipedia.org/wiki/LastPass https://en.m.wikipedia.org/wiki/LastPass Read the "reception" section.
- mod 4y ago
  If it were an individual experience, I would agree with you, but it is public knowledge. There were press releases and emails and stuff. I also switched away from last pass then.
  - javajosh 4y ago
    It's very easy to overestimate what "everyone knows".
    - mod 4y ago
      Public knowledge is not the same as common knowledge, I agree.
- Jolter 4y ago
  Doesn’t really matter what Lastpass did wrong, does it? The point is that trustworthiness is the single most important value for someone who wants users to entrust them with their credentials. Another point is how easily they can lose users. The poster lost trust in them, and was able to swap them out in a day.
crazygringo 4y ago
> I don't give second chances to services that are trust based. You might run out of services then at some point. Human beings are fallible, full stop. Also, a company isn't an individual -- management teams change, corporate priorities change, security practices improve. Judging a whole company by what a few employees did or didn't do a decade ago isn't always going to yield an optimal approach. Refusing to give any company a second chance ever is pretty extreme. Each individual case needs to be handled on its merits -- what happened, why did it happen, do you think the company learned and implemented new policies, how many other undiscovered vulnerabilities do you think are still there? But also, how many other undiscovered vulnerabilities do you think are still there for competitors as well? Just because a competitor hasn't had a breach doesn't necessarily means it's better, it might just be lucky so far.
- mgkimsal 4y ago
  2001-2007, I had multiple bad experiences with Compaq, Lexmark and HP. These were so bad in terms of cost and frustration I vowed I would never buy their products or services again. It's been... 15+ years. The tech world of today is not quite the tech world of 2003. Should I ever bother with a Compaq or HP again? I probably won't, but the 'avoid at all costs' just isn't there with me any more. Perhaps I've mellowed slightly in the past 15-20 years.
  - StevePerkins 4y ago
    > Should I ever bother with a Compaq.. I don’t know guys, should we tell him?
    - mgkimsal 4y ago
      Acquired by HP? I've been out of that world for a while, and I still see the compaq name now and then, but it looks like it's more of just a name licensing deal now?
      - StevePerkins 4y ago
sircastor 4y ago
I bailed on lastpass when they doubled the annual price for the second year in a row. They had also just been acquired by LogMeIn, who didn’t have a great reputation. I don’t know if I can manage another service switch. I can do it just fine, but my wife is more resistant to these kinds of changes and we need to be on the same page on this.
- papito 4y ago
  I just started using Dropbox Password Manager, it's a nice value-add if you are already a customer. With the base service, Vault, and this, it's a nice overall package.
behnamoh 4y ago
I mean, it's not as if these companies care for customers like you anyway. What they want is someone who is willing to purchase their product w/o making a fuss about the negative parts of their business. In fact, I bet LastPass is happy you left.
Tijdreiziger 4y ago
Ugh, I'm paying for LastPass because I haven't gotten around to switching to Bitwarden yet. They list a monthly price, but they actually charge you annually, so you're essentially locked in for a year (if you want to make the most of your money).
- mellavora 4y ago
  Pay the monthly fee for 2 months, then if you like it go annual. Assume you like it, you are going to be using it for a year anyway.
  - Tijdreiziger 4y ago
    I mean that LastPass charges you annually, not Bitwarden.
_abox 4y ago
> What the VCs have to understand is that if their greed makes them push Bitwarden to engage in silly tactics, they risk driving away their customer base. They don't care as long as they can extract their profit before that happens. This is VC, they will prioritize medium term gains over long term stability.
- millimeterman 4y ago
  On HN, VCs are either ruthless short-term profit extracting machines or overly optimistic clowns investing in hopelessly unprofitable companies on the promise of future growth, depending entirely on the point currently being made.
  - Barrin92 4y ago
    tbf both may very well be true at the same time. There's certainly a larger number of both AI powered juice makers as well as "freeze your head" longevity startups than anywhere else

by bborud 4y ago

TheKarateKid 4y ago

LastPass pricing model is what turned me off. I am happy to pay for services I use regularly, but I remember the pricing model didn't seem appropriate for what they were offering. The short cutoff period added insult to injury. I checked out Bitwarden and it seemed like a better version of LastPass that just happened to be free. Their paid model doesn't appeal to me so I don't subscribe, but I would enjoy paying if they offered something that did. (Off-topic: Bitwarden seems like an exact LastPass clone all the way down to the UI. Do they share a similar codebase or something? Like was one forked from an OSS version of the other?)

godelski 4y ago
Same, I even remember paying for LastPass for a bit. It was more that I wanted to support a service I liked (same reason I pay for other services). Though I find BW's paid model a bit surprising. I know it is only $10/yr, but the only real value here is 1GB storage and yubi/fido keys. I don't have yubi keys (they seem cool but also a pain in the ass) and 1GB seems rather small. Looking at Google, Dropbox, and Apple, storage pricings range from 4GB/$ (Apple) to 20GB/$ (Google's 5+TB plans). I'm willing to bet that offering 5GB would make it more worthwhile and a very small fraction of your users would actually use it. What are you going to store? Your passport photo and driver's license? I wonder if there would be a psychological effect here because it is really hard to tell if 1GB is enough or not. At least your average person has no idea.
- fencepost 4y ago
  One paid feature that can be very important is designating emergency access contacts. A family member had a stroke last year (doing much better now) and one thing that made life much easier was having access to his passwords - in this case because I'd set him up with Keepass years ago and still had the password saved.

dieselgate 4y ago

Dang changing a password manager seems like a nightmare. I use pen and paper which, given the trade offs, makes the most sense for me

simsla 4y ago
I thought it would be bad, but it didn't take long when I switched to BW from LP. Half an hour maybe? And that includes setting up Duo for push notification 2FA.
- dieselgate 4y ago
  Oh that’s good to hear, glad it was straightforward
- fencepost 4y ago
  There is one thing you lose when doing this, pretty sure password history is still not a part of the export.
rstuart4133 4y ago
Last I looked, Bitwarden data is a single JSON thingy (details are hazy now). I exported my existing passwords, converted the result to the JSON format using vim or something, and imported it. Job done.

fencepost 4y ago

I didn't mind paying for Lastpass, but I started planning to move away when they were bought by LogMeIn because I've seen that company's acquisitions before. Jumped from a paid LP plan to a Bitwarden family plan with sharing and emergency access and quite happy.

javajosh 4y ago

What specifically did they do to trick you into paying?

hedora 4y ago
https://en.m.wikipedia.org/wiki/LastPass https://en.m.wikipedia.org/wiki/LastPass Read the "reception" section.
mod 4y ago
If it were an individual experience, I would agree with you, but it is public knowledge. There were press releases and emails and stuff. I also switched away from last pass then.
- javajosh 4y ago
  It's very easy to overestimate what "everyone knows".
  - mod 4y ago
    Public knowledge is not the same as common knowledge, I agree.
Jolter 4y ago
Doesn’t really matter what Lastpass did wrong, does it? The point is that trustworthiness is the single most important value for someone who wants users to entrust them with their credentials. Another point is how easily they can lose users. The poster lost trust in them, and was able to swap them out in a day.

crazygringo 4y ago

> I don't give second chances to services that are trust based. You might run out of services then at some point. Human beings are fallible, full stop. Also, a company isn't an individual -- management teams change, corporate priorities change, security practices improve. Judging a whole company by what a few employees did or didn't do a decade ago isn't always going to yield an optimal approach. Refusing to give any company a second chance ever is pretty extreme. Each individual case needs to be handled on its merits -- what happened, why did it happen, do you think the company learned and implemented new policies, how many other undiscovered vulnerabilities do you think are still there? But also, how many other undiscovered vulnerabilities do you think are still there for competitors as well? Just because a competitor hasn't had a breach doesn't necessarily means it's better, it might just be lucky so far.

mgkimsal 4y ago
2001-2007, I had multiple bad experiences with Compaq, Lexmark and HP. These were so bad in terms of cost and frustration I vowed I would never buy their products or services again. It's been... 15+ years. The tech world of today is not quite the tech world of 2003. Should I ever bother with a Compaq or HP again? I probably won't, but the 'avoid at all costs' just isn't there with me any more. Perhaps I've mellowed slightly in the past 15-20 years.
- StevePerkins 4y ago
  > Should I ever bother with a Compaq.. I don’t know guys, should we tell him?
  - mgkimsal 4y ago
    Acquired by HP? I've been out of that world for a while, and I still see the compaq name now and then, but it looks like it's more of just a name licensing deal now?
    - StevePerkins 4y ago

sircastor 4y ago

I bailed on lastpass when they doubled the annual price for the second year in a row. They had also just been acquired by LogMeIn, who didn’t have a great reputation. I don’t know if I can manage another service switch. I can do it just fine, but my wife is more resistant to these kinds of changes and we need to be on the same page on this.

papito 4y ago
I just started using Dropbox Password Manager, it's a nice value-add if you are already a customer. With the base service, Vault, and this, it's a nice overall package.

behnamoh 4y ago

I mean, it's not as if these companies care for customers like you anyway. What they want is someone who is willing to purchase their product w/o making a fuss about the negative parts of their business. In fact, I bet LastPass is happy you left.

Tijdreiziger 4y ago

Ugh, I'm paying for LastPass because I haven't gotten around to switching to Bitwarden yet. They list a monthly price, but they actually charge you annually, so you're essentially locked in for a year (if you want to make the most of your money).

mellavora 4y ago
Pay the monthly fee for 2 months, then if you like it go annual. Assume you like it, you are going to be using it for a year anyway.
- Tijdreiziger 4y ago
  I mean that LastPass charges you annually, not Bitwarden.

_abox 4y ago

> What the VCs have to understand is that if their greed makes them push Bitwarden to engage in silly tactics, they risk driving away their customer base. They don't care as long as they can extract their profit before that happens. This is VC, they will prioritize medium term gains over long term stability.

millimeterman 4y ago
On HN, VCs are either ruthless short-term profit extracting machines or overly optimistic clowns investing in hopelessly unprofitable companies on the promise of future growth, depending entirely on the point currently being made.
- Barrin92 4y ago
  tbf both may very well be true at the same time. There's certainly a larger number of both AI powered juice makers as well as "freeze your head" longevity startups than anywhere else