7 ms·
I just went into my old lastpass account to try and wind down the account, delete everything, and then close the account. No option to "select all" in the list
by mjsweet 4y ago
I just went into my old lastpass account to try and wind down the account, delete everything, and then close the account.
No option to "select all" in the list so I resorted to clicking the check box on by one down the page. I accidentally slightly clicked outside a check box... guess what? Everything gets deselected.
Start over.
Ok start again, maybe I want to list in alphabetical order rather than group by category to minimise mistakes. Whoops, selecting that option deselects everything in the list.
300 odd deleted in batches of 30-40.
When a company's whole application is covered in anti-patterns and dark UX to make it as hard as possible to leave then companies like this deserve to die.
Deleting the account is a bit tricky too.
1. Go into account settings in the top right drop down
2. In the Links area click on "My Account" which spawns a new browser window
3. Click the red "Delete or Reset Account", you can't miss all the red buttons
4. You can either reset your account or delete, choose delete
5. A modal will appear telling you stuff, enter your master pw, a reason why your leaving and then click delete
6. You will be asked twice if you really really want to do this
7. Press ok
- robszumski 4y agoIt's become so clear that users of a SaaS deserve more control how their data is used and stored. You should absolutely be able to crypto-shred your data from such an important service. This experience sounds awful.
- flandish 4y agoI had migrated away a year or so ago. Tried to log in to confirm, it did not work. Tried password reset. No reset email. So that’s good… I guess. I remember deleting my acct. not sure if I manually deleted entries before though. That said - if a data breach includes backup access… is your account ever really deleted?
- drewnick 4y agoI also did not have a "Select all" box but was able to check the first entry, scroll down, hold shift, and check the last box which then selected all items in between. So I removed all of 600 of my accounts in about 20 seconds. Hope this helps someone.
- aendruk 4y agoShift+Click to select a range is so second nature by now I don’t think it would have occurred to me to look for (or on the flip side, create) a dedicated “all” button.
- mihaaly 4y agoShouldn't be a second nature, that is a good old well known useful pattern like right click for context menu, very essential. Even if new methods are coined by some local reasons old and generic ones should be remembered to avoid the hopeless chaos the UX partisans push us into nowadays, doing things differently for the sole sake of doing differently.
- danmur 4y agoJust me of course but I don't think I'd guess that without certain UI cues. With checkboxes for eg I wouldn't even think of shift clicking. Not disagreeing, just thinking aloud :)
- DangitBobby 4y agoWhen there is no obvious UI option, you at least gotta try it!
- joshspankit 4y agoFor me it’s second nature in desktop applications and file management, but I never assume that the any specific web dev has added it. (And tbh: I have less and less confidence in web code in general.)
- phillipseamore 4y agoSomething like this might work, open DevTools and do: document.querySelectorAll('[type="checkbox"]').forEach(function(el) {el.checked=true;})
- joshka 4y agoThe checkboxes are buttons :) <button class="itemCheckbox" tabindex="17" aria-label="Select"></button>
- phillipseamore 4y agoOh dear... looks like the guy that decided to store the URLs in the clear also does the web design
- aliswe 4y agowdym by store the URLs in the clear ?
- darrenf 4y agoFrom the article (emphasis added): “The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs …”
- mananaysiempre 4y agoYou need to compare the URLs at least for equality in order to resolve conflicts, which is most straightforwardly done server-side. You could maybe do some sort of content-defined encryption to them, but I’m not sure how useful that would be. So storing the URLs in the clear is unfortunate but not inherently dumb. (As to how KeePass implementations deal with this problem when on top of a single synced file: they mostly don’t, data loss on conflict is not uncommon[1].) [1] https://www.ctrl.blog/entry/keepass-file-conflicts-android.html https://www.ctrl.blog/entry/keepass-file-conflicts-android.h...
- invalidator 4y agoI did it in the web UI in a couple minutes with down-space-down-space-down-space.... Also make sure to go to Advanced Options, View Deleted Items, and purge them from there.
- mjsweet 4y agoThat's how I did the last one hundred or so in the end too. Someone also said shift click works to select everything as well, I tried it but it didn't work for me in Safari.
- rob74 4y agoI don't think that's dark UX, it's just shitty UI design. What bugs me the most about LastPass is how it tries to be so damned helpful and offers to fill in credentials on sites that they clearly don't belong to, or offers to save credentials on a site where I alredy clicked "don't save" 1000 times, no really, I don't want to save my private passwords in my company vault thank you very much, why the f$%& don't you have a "don't bug me again" checkbox in this sh*$$y popup?!
- rzzzt 4y agoSomething something Hanlon's razor.
- nashashmi 4y agohttps://lastpass.com/delete_account.php https://lastpass.com/delete_account.php
- zacharyvoase 4y agoThe fact that it ends in `.php` is not inspiring confidence. It's 2022, it's so easy to make pretty URLs.
- fomine3 4y agoCool URIs don't change
- Kwpolska 4y agoA URI ending in .php is not cool (never was), and this advice is most important for content (articles etc.), not necessarily for account management pages.
- paledot 4y agoWhich is why you shouldn't include implementation details in your URL.
- fennecfoxy 4y agoObfuscation isn't security etc etc
- paledot 4y agoI wasn't commenting on the security implications. My point was that bleeding implementation details like .php in your URLs is silly because that URL might end up being served by a Node app one day. But on the security point, a URL ending in .php does imply a "we just YOLO'd a bunch of bare scripts into the webroot" application architecture, which is not confidence inspiring as a user and sure looks attractive to pentest.
- hangonhn 4y agoBTW, if you're exporting your data, check that it's all there. I had the unpleasant experience of noticing Lastpass either has a buggy implementation or intentionally giving an incomplete export. I ended up needing to manually copy credentials over one by one. I hate Lastpass so much.
- bee_rider 4y agoIt is a little weird — I vaguely recall that the sort of “diplomatic” answer about password managers has been for a while something like “well, you should use keepass and just keep things local, but if you want to ease of use, lastpass is not too bad.” So that went right out the window I guess. I mostly use keepass, but for some accounts I don’t really care about I’ve started using the built in Firefox/iOS stuff. Giving that a second thought about now…
- rosywoozlechan 4y agoopen the dev console and use Javascript. Find the input element to check and create a query that sets them all to checked with https://developer.mozilla.org/en-US/docs/Web/API/Document/querySelectorAll https://developer.mozilla.org/en-US/docs/Web/API/Document/qu...
- mrlatinos 4y agoI'm not able to delete my account. The modal that opens is empty. I think they've disabled it.
- kc10 4y agoJust deleting the account won't solve the issue anyway. I am resetting all the passwords for all my accounts. It's super annoying and it will days for me to reset all the passwords. But thankfully I have MFA for all important stuff.
- x86hacker1010 4y agoJust type this in the web console for now: for (item of document.getElementsByClassName('vault-item-displayname')) { item.click() }
- yoaviram 4y agoSend them a data deletion request. This service makes it easy to do so: https://yourdigitalrights.org/d/lastpass.com https://yourdigitalrights.org/d/lastpass.com