6 ms·

I've been using LastPass for years. Of course, there's no way to be completely safe using a cloud-based service and closed-source code, but so far they've condu

I've been using LastPass for years. Of course, there's no way to be completely safe using a cloud-based service and closed-source code, but so far they've conducted themselves in a trustworthy manner, and the system they've built has safeguards against remote security failures. Their cross-platform support is great as well. The only thing that's missing is a solid way to retrieve passwords on Android. The LastPass "keyboard" is abysmal, and switching between their app and the one you want to enter the username/password in can be painful. I'm not sure if there's an easy way to solve this problem, though, given the sandboxed nature of mobile apps.

partkyle 13y ago
There is a recent update on android that is fantastic. An overlay will appear on any app requesting a password, including the browser. It's actually better than integration with a computer.
- penthehuman 13y ago
  That overlay only shows up for me after I've switched to the LastPass keyboard and selected the password and filled in the box, too little way too late.
  - thracky 13y ago
    Shows up for me without issue so long as I've already logged in to the LastPass app. Not using the lastpass keyboard either.
- w1ntermute 12y ago
  I think I saw that once or twice after updating, but it then stopped working for me. I'll have to investigate what's going on.
hugofirth 13y ago
The latest updates solve this problem (in Android at least) by using the accessibility features. When a login appears (in an app or browser) an overlay appears with matching credentials that you can copy with a single click.
- benferris 13y ago
  It is great when this new feature works, but unfortunately it doesn't work all the time. Hopefully it will continue to get better.
glomph 13y ago
I find it a bit weird that the OP only mentioned 1password and omitted lastpass which has been cross platform for longer and is free for basic use.
zck 13y ago
Notably, their code for their Firefox extension^1, while not free software, is available to look at. Firefox extensions are delivered as an XPI file (https://developer.mozilla.org/en-US/docs/XPI https://developer.mozilla.org/en-US/docs/XPI), which is simply a renamed .zip . So it can be extracted with gunzip, 7-zip, winzip, etc. Inside the .xpi are various human-readable files, including .js, .xml, and .config files (https://developer.mozilla.org/en-US/docs/Bundles https://developer.mozilla.org/en-US/docs/Bundles). So you can literally examine the source of any Firefox extension. And not just source you hope is the same as the delivered extension^2, but literally the running code. So no, it's not free software. But it is accessible for you to read^3. [1] I _know_ this is true for Firefox. I think it is for Chrome, but I'm not sure. I have no idea for any other browser. [2] How do you know the code for e.g. Firefox that you clone from https://hg.mozilla.org/mozilla-central/ https://hg.mozilla.org/mozilla-central/ is the same code used to build the browser downloaded at mozilla.org ? You don't, unless you go to the lengths of building it yourself and doing a bitwise comparison of the executables, but that is going to be error-prone. But you can pull the Lastpass extension out of your profile and see the exact code being run. [3] Unless they download code from somewhere and eval() it.
platz 13y ago
I just stick to the bookmarklets on the mobile browser

partkyle 13y ago

There is a recent update on android that is fantastic. An overlay will appear on any app requesting a password, including the browser. It's actually better than integration with a computer.

penthehuman 13y ago
That overlay only shows up for me after I've switched to the LastPass keyboard and selected the password and filled in the box, too little way too late.
- thracky 13y ago
  Shows up for me without issue so long as I've already logged in to the LastPass app. Not using the lastpass keyboard either.
w1ntermute 12y ago
I think I saw that once or twice after updating, but it then stopped working for me. I'll have to investigate what's going on.

hugofirth 13y ago

The latest updates solve this problem (in Android at least) by using the accessibility features. When a login appears (in an app or browser) an overlay appears with matching credentials that you can copy with a single click.

benferris 13y ago
It is great when this new feature works, but unfortunately it doesn't work all the time. Hopefully it will continue to get better.

glomph 13y ago

I find it a bit weird that the OP only mentioned 1password and omitted lastpass which has been cross platform for longer and is free for basic use.

zck 13y ago

Notably, their code for their Firefox extension^1, while not free software, is available to look at. Firefox extensions are delivered as an XPI file (https://developer.mozilla.org/en-US/docs/XPI https://developer.mozilla.org/en-US/docs/XPI), which is simply a renamed .zip . So it can be extracted with gunzip, 7-zip, winzip, etc. Inside the .xpi are various human-readable files, including .js, .xml, and .config files (https://developer.mozilla.org/en-US/docs/Bundles https://developer.mozilla.org/en-US/docs/Bundles). So you can literally examine the source of any Firefox extension. And not just source you hope is the same as the delivered extension^2, but literally the running code. So no, it's not free software. But it is accessible for you to read^3. [1] I _know_ this is true for Firefox. I think it is for Chrome, but I'm not sure. I have no idea for any other browser. [2] How do you know the code for e.g. Firefox that you clone from https://hg.mozilla.org/mozilla-central/ https://hg.mozilla.org/mozilla-central/ is the same code used to build the browser downloaded at mozilla.org ? You don't, unless you go to the lengths of building it yourself and doing a bitwise comparison of the executables, but that is going to be error-prone. But you can pull the Lastpass extension out of your profile and see the exact code being run. [3] Unless they download code from somewhere and eval() it.

platz 13y ago

I just stick to the bookmarklets on the mobile browser