Solved Which is your preferred password manager

johnlgalt · Dec 26, 2022

Dru2 said:
At the rate things are going today nothing is safe or hack proof. And when someone (company) tries to make things, safe people complain "it's too inconvenient. Why do they need my phone number and email address?"

That said, I don't use password managers unless you call Edge one as it saves the passwords I use.

Nothing has ever been safe or hack proof. That's the big lie.

If it is digital, it can be hacked.

And the browser-based / online account based (Microsoft / Google) ones are just as valid as any other, and I think are worth including under the umbrella of 'Password Manager'.

Dru2 · Dec 26, 2022

johnlgalt said:
If it is digital, it can be hacked.

Yeah, I've been saying that for years, though I use the words computer code. Same thing though.

kelper · Dec 26, 2022

I plan to try alternative password managers so I exported my LastPass vault. This either opens a PHP file in your browser or you can download as a csv. Beware! Both show all your passwords, secure notes and credit card security codes in plain text!

Make sure to SECURELY delete after importing to your new password manager!

Edwin · Dec 26, 2022

Still using my Cahier D'Exercices, ain't got time to p*ss around!

You guys gonna be alright???

TraderGary · Dec 26, 2022

Edwin said:
Still using my Cahier D'Exercices, ain't got time to p*ss around!

You guys gonna be alright???

Yes, all is good here! Happy Holidays!

PerpetualCycle · Dec 30, 2022

If only a small subset is correct and true about LP, I wouldn't touch LP with a 100 foot pole.

Jeremi M Gosney :verified: (@epixoip@infosec.exchange)

I recently wrote a post detailing the recent #LastPass breach from a #password cracker's perspective, and for the most part it was well-received and widely boosted. However, a good number of people questioned why I recommend ditching LastPass and expressed concern with me recommending people...

infosec.exchange

trevo · Dec 30, 2022

I don't have any skin in the game (Keepass user) but I'm seriously wondering if LastPass's business can survive this...

The LastPass disclosure of leaked password vaults is being torn apart by security experts

“LastPass’s claim of ‘zero knowledge’ is a bald-faced lie.”

www.theverge.com

TairikuOkami · Dec 31, 2022

trevo said:
but I'm seriously wondering if LastPass's business can survive this...

People have a short attention span, LP is being hacked regularly every year and yet it is growing.

mccnavy · Dec 31, 2022

I had used LastPass up until several years ago and then switched to Bitwarden. After the most recent LastPass hack, I just deleted my vault and account.

kelper · Dec 31, 2022

How do we know Bitwarden is any more secure than LastPass? I have not heard of anyone suffering any loss as the result of the hacks. Perhaps this is proof that LP really does protect our data, even if hackers are able to download it. I have a long masterpassword and feel safe at present.

mccnavy · Dec 31, 2022

Obviously, nothing is 100%...as I'm sure people have said earlier. I don't know what LastPass does in terms of relationship with researchers but Bitwarden is supposedly both open source (which appeals to a lot of people) and advertises that it has been audited by security researchers. Awaiting confirmation, but there are articles out now that claim that LastPass customer information (including vaults) may have been stolen in recent hack. Maybe the hackers can't do anything with it...but...if they have sophisticated equipment they may be able to hack master passwords that get them access to those vaults. If Bitwarden, or any other company for that matter, is deemed less secure, or subject to a hack that puts customer information in danger, I suspect you'd see a lot of people leave them too.

Edwin · Dec 31, 2022

Jeebus, you guys are in a bad way!
Want me to scoop some of these up for ya? I can even deliver 'em!

Sorry! I figured this thread could use a little levity!!!

kelper · Dec 31, 2022

Do you carry these notebooks with you when you are out or on a trip? Most of us like to keep passwords synchronised between our desktops, laptops and phones. Chacun à son gôut, of course.

Over the years, I have accumulated about 1,500 passwords. I doubt that would be manageable on paper and your "encoding" whatever it is to obfuscate your passwords is probably 100,000 times easier to crack than the open-source hashing used by LP!

No offense meant!

kelper · Dec 31, 2022

mccnavy said:
I had used LastPass up until several years ago and then switched to Bitwarden. After the most recent LastPass hack, I just deleted my vault and account.

I might do the same, but if your vault ever was copied, you now need to change every password even if you trust LP to have securely wiped it!

This is why I will keep LP but use BW as a backup in case Elon (Casanova) Musk buys LP.

TairikuOkami · Dec 31, 2022

kelper said:
Over the years, I have accumulated about 1,500 passwords.

Wow. I used the same password on generic webpages, but since it was leaked and even emailed to me by hackers, I can not use it anymore, literally, webpages use that silly paassword leak service, so I just use the webpage's link as the password: elevenforum.com

cereberus · Dec 31, 2022

My brain.

kelper · Dec 31, 2022

cereberus said:
My brain.

Your brain what? Without quoting, we don't know to whom (!) you are replying. I wonder, if you had a minor stroke, would you lose the passwords stored in only one half of this enormous brain?

- TIC.

mccnavy · Dec 31, 2022

kelper said:
I might do the same, but if your vault ever was copied, you now need to change every password even if you trust LP to have securely wiped it!

This is why I will keep LP but use BW as a backup in case Elon (Casanova) Musk buys LP.

True...or at least remain vigilant to see if there is any indication that it was compromised. 2-step verification, if enabled, helps too. Likewise, seeing if there is anything out there on sites like "have I been pwned" are resources to keep an eye on.

kelper · Dec 31, 2022

Yes. I was thinking of people who might delete their LP account and think that removed the risk.

Edwin · Dec 31, 2022

kelper said:
Do you carry these notebooks with you when you are out or on a trip? Most of us like to keep passwords synchronised between our desktops, laptops and phones. Chacun à son gôut, of course.

Over the years, I have accumulated about 1,500 passwords. I doubt that would be manageable on paper and your "encoding" whatever it is to obfuscate your passwords is probably 100,000 times easier to crack than the open-source hashing used by LP! No offense meant!

Awww, don't mind me, I was just being flippant! My apologies!
Everybody around here knows I'm an idiot..., sometimes!