3 ms·

I use LastPass and I can't recommend it enough. It's fantastic and I have different passwords for everything simply because I never bother making passwords. I j

by arjie 12y ago

I use LastPass and I can't recommend it enough. It's fantastic and I have different passwords for everything simply because I never bother making passwords. I just hit the random function on it. I still have my email passwords memorized, though. This is honestly the best service I've ever paid for. It has never failed me, and it substantially improves my life.

seanwilson 12y ago
I use LastPass and think it's great as well. I've tried to recommend it to others though and the common reply is "that doesn't sound secure enough for company policy". They don't seem to realise though that their usual approach of sharing passwords over email, using the same password for several logins so it's easy to remember and using easy to remember passwords in general is much more insecure. Services like LastPass make it practical for you to use impossible to guess passwords, different passwords for every site and let you share passwords securely.
- dikaiosune 12y ago
  My key argument when I've convinced past employers to implement it: you already outsource all of the hard parts of your security. Antivirus, firewall, AD permissions, server config, all of it. They either bought a product to fit the need or hired a consultant to do the advanced stuff. $12/year is pretty cheap to hire a dedicated team of security wonks to safeguard your passwords, IMO.
  - seanwilson 12y ago
    It's not the cost that's the issue though, people don't like the idea of passwords being stored in a single place on a internet connected computer. I mention that you can secure password access behind two factor authentication but it doesn't get around the knee-jerk reaction often. Sharing lots of passwords when working with a team remotely is especially painful when password managers are not allowed...
walterbell 12y ago
Strip (https://www.zetetic.net/blog/ https://www.zetetic.net/blog/) is a mature and multi-platform local password manager that does not need a cloud connection, and can optionally sync from mobile to a local desktop. Made by the developers of open-source SQLCipher for SQLite, https://github.com/sqlcipher/sqlcipher https://github.com/sqlcipher/sqlcipher I wish they would integrate with iOS8 Safari as an extension.
nostromo 12y ago
That's all built in on Safari now. It's dead simple to use. But obviously it only works inside the Apple ecosystem. I'm surprised Google hasn't built it in to Chrome yet.
- deadhead 12y ago
  Chrome does have a password generator and password syncing though I think the generator is hidden behind a flag still.
emn13 12y ago
Lastpass is surprisingly slow however - and that affects general browsing performance.
kristiandupont 12y ago
I use LastPass too and I am happy with it but I really wish they would do something about that UI. Not a very good experience, IMO.
sleepychu 12y ago
My issue with lastpass is that it's basically unusable when you don't use it as an extension. I'm not willing to load a proprietary blob that actively manipulates the dom and passwords every time I visit a page.

by arjie 12y ago

seanwilson 12y ago

I use LastPass and think it's great as well. I've tried to recommend it to others though and the common reply is "that doesn't sound secure enough for company policy". They don't seem to realise though that their usual approach of sharing passwords over email, using the same password for several logins so it's easy to remember and using easy to remember passwords in general is much more insecure. Services like LastPass make it practical for you to use impossible to guess passwords, different passwords for every site and let you share passwords securely.

dikaiosune 12y ago
My key argument when I've convinced past employers to implement it: you already outsource all of the hard parts of your security. Antivirus, firewall, AD permissions, server config, all of it. They either bought a product to fit the need or hired a consultant to do the advanced stuff. $12/year is pretty cheap to hire a dedicated team of security wonks to safeguard your passwords, IMO.
- seanwilson 12y ago
  It's not the cost that's the issue though, people don't like the idea of passwords being stored in a single place on a internet connected computer. I mention that you can secure password access behind two factor authentication but it doesn't get around the knee-jerk reaction often. Sharing lots of passwords when working with a team remotely is especially painful when password managers are not allowed...

walterbell 12y ago

Strip (https://www.zetetic.net/blog/ https://www.zetetic.net/blog/) is a mature and multi-platform local password manager that does not need a cloud connection, and can optionally sync from mobile to a local desktop. Made by the developers of open-source SQLCipher for SQLite, https://github.com/sqlcipher/sqlcipher https://github.com/sqlcipher/sqlcipher I wish they would integrate with iOS8 Safari as an extension.

nostromo 12y ago

That's all built in on Safari now. It's dead simple to use. But obviously it only works inside the Apple ecosystem. I'm surprised Google hasn't built it in to Chrome yet.

deadhead 12y ago
Chrome does have a password generator and password syncing though I think the generator is hidden behind a flag still.

emn13 12y ago

Lastpass is surprisingly slow however - and that affects general browsing performance.

kristiandupont 12y ago

I use LastPass too and I am happy with it but I really wish they would do something about that UI. Not a very good experience, IMO.

sleepychu 12y ago

My issue with lastpass is that it's basically unusable when you don't use it as an extension. I'm not willing to load a proprietary blob that actively manipulates the dom and passwords every time I visit a page.