Why people still use it despite two security breaches?
this post was submitted on 25 Jun 2023
119 points (98.4% liked)
Technology
59120 readers
3733 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
This is not a good reason, but it’s time consuming switching to another password vault. shields up
I switched from LastPass to Bitwarden, years ago now, and the whole process took roughly 5 minutes. I'm not sure if something has changed since then, or if it's more complicated to switch to something other than Bitwarden, but my experience is that it at least can be simple.
There were issues exporting passwords from LastPass when I tried moving after the first security breach. It would only create a CSV with a few rows and it was an issue for many at the time. I couldn’t help be cynical about the timing.
Oh, that definitely makes sense. I switched away as concerns around third-party trackers came up, in 2021. If I'd only been able to export a CSV with a few rows, I'd have been upset about it.
The change was LastPass messing around with their membership options.
I had LastPass for years. I eventually decided to pay for it. Then they decided to remove premium all together...only to add it back by taking away features. One of those features was being able to use both mobile and web.
I opted for mobile, because I always have my phone with me, and the app has biometric unlock, whereas web does not.
But you can't save and export your LastPass via mobile. Has to be web. So I had to switch that. And I'm just now getting to a point where I can transfer.
You can import your password database from lastpass to bitwarden.
Does it have a browser extension, cloud syncing, and family sharing?
Bitwarden does yes
I'll have to give it a shot then.
The LastPass export doesn't capture attachments. So depending how heavily you used that feature. It can be a bit more complicated.
Bitwarden FTW
Just use Bitwarden, Keepass, or whatever your choice. I'm surprised people still trust Last Pass.
Bitwarden, Keepass
Do you mind if I pass your number on to my mother and father in law for tech support in setting it up on their Windows laptops and iPhones? I would do it, but I already have a full time job.
Bitwarden is not so bad. Keepass, no way.
Yeah, local only will kill ease of assistance.
If they have a windows laptop they probably also have an android phone. In that case it would make the most sense to have them use the chrome/google password manager.
I promise they have win+iOS. iMessage is the only reason that I have an iPhone. Well, that and the inability for any other messaging service to provide reliable real-time messaging with read receipts (both critical for core-family safety reasons; friends and work colleagues get my GVoice number which, ironically, worked better on iOS than Android at the time I switched).
As a bonus, my F-I-L currently uses the Notes app as his vault (not the secure version, just a note entitled "Passwords") and my mother uses a combination of several slips of paper floating about her office, Google Chrome's internal password memory system, and a system involving her dog's name, a site identifier, and the last four digits of a phone number she had as a child. That last one is pretty good, except that the old bird is really bad at remembering which letters she capitalizes and which part of the URL she's going t use as the identifier, so some sites are just easier for her to get a password reset every time she uses them. I'm actually getting jittery just thinking about it.
Hahahaha say no more I get PTSD flashbacks to my father in law getting angry at me because he forgot his password.
Sometimes just defaulting to password recovery through “i forgot my password” is sometimes the best bet.
Went to 1password shortly after the first (maybe) debacle and have been extremely pleased since. I know it's a similar risk with a hosted database but the convenience is hard to beat
same just with bitwarden. Honestly i think anything might be better than LastPass.
Always a great sign, when a password vault doesn’t test their software properly.
I know it's not a guarantee, but this is why I switched to Bitwarden. With Open Source software it's less likely that this fuckups happen.
That's why I love LessPass, no way of being compromised.
Some time back I was choosing between 1Password and LastPass. It seemed like a close contest at the time. But I’ve been very glad I chose 1Password in the time since then.