5 ms·
LastPass makes it much, much easier to never re-use passwords. Just make sure your master password is unique and strong and never re-used and you use 2FA!
by cheald 14y ago
LastPass makes it much, much easier to never re-use passwords. Just make sure your master password is unique and strong and never re-used and you use 2FA!
- StavrosK 14y agoI use SuperGenPass, it's comparable and requires storing no state, thus nothing to lose or back up.
- amalag 14y agoIs it still completely vulnerable? http://akibjorklund.com/2009/supergenpass-is-not-that-secure http://akibjorklund.com/2009/supergenpass-is-not-that-secure
- StavrosK 14y agoI use EngimaPass[1], which, as an extension, renders outside the DOM, so it's not. [1] https://chrome.google.com/webstore/detail/enigmapass/bgkipgfgpifliinhbnfoaafgdeemodoi?hl=en https://chrome.google.com/webstore/detail/enigmapass/bgkipgf...
- amalag 14y agoThank you, I was looking for one and thinking of buying a yubikey as well.
- lacerus 14y agoDownside: You can never change your SuperGenPass password, even if a site requires you to.
- pwman 14y agoThis is a huge downside -- accidentally type your password on a device you shouldn't have? You now have to update every site rather than just updating your master password.
- iand 14y agoI use http://clipperz.com/ http://clipperz.com/ which is zero knowledge http://www.clipperz.com/users/marco/blog/2007/08/24/anatomy_zero_knowledge_web_application http://www.clipperz.com/users/marco/blog/2007/08/24/anatomy_...
- pwman 14y agoYou can use LastPass as completely zero knowledge app by not utilizing the binary extensions for Chrome or Firefox.
- SkyMarshal 14y agoI prefer KeePass (2 or X) with the encrypted pwd database backed up to SpiderOak (or Tarsnap, the only two really secure backup services I know of). OSS, local not cloud-based, encrypted pwd file, excellent pwd generator, easy to use.