8 ms·
Is there a better cloud-based alternative to LastPass? I see KeePass being mentioned but I’m not interested in the keeping devices in sync myself.
by nde 4y ago
Is there a better cloud-based alternative to LastPass? I see KeePass being mentioned but I’m not interested in the keeping devices in sync myself.
- Kiro 4y agoThe built-in password manager in Chrome. Nothing to install and works seamlessly across all devices.
- SparkyMcUnicorn 4y agoI can never recommend 1Password enough. When it comes to hosted options, they are hands down the best. Worth pointing out that they also have integrated 2FA, if you're satisfied with first and second factor living in the same spot. https://1password.com https://1password.com
- alfalfasprout 4y agoWhat about 1password is inherently safer though?
- SparkyMcUnicorn 4y agoI'd suggest reading their security page[0] and write ups others like Troy Hunt has done[1][2]. [0] https://1password.com/security/ https://1password.com/security/ [1] https://www.troyhunt.com/have-i-been-pwned-is-now-partnering-with-1password/ https://www.troyhunt.com/have-i-been-pwned-is-now-partnering... [2] https://haveibeenpwned.com/1Password https://haveibeenpwned.com/1Password
- symlinkk 4y ago> if you're satisfied with first and second factor living in the same spot It’s no longer “2FA” then.
- robbintt 4y agoIt is still 2 factor, breaching the password manager is a corner case that you can decide to cover or not. It seems like for critical accounts you should NOT. For derived accounts, it should be better than just a password.
- lxgr 4y agoOnly very marginally so. Or what would you say storing a (unique, long) password next to a TOTP hash actually achieves?
- sceutre 4y agoWell the totp (even in your passwd manager) defends against phishing I'd thought vs password alone.
- lxgr 4y agoFor a "service based" password manager, sure. (It can prevent the service from ever handing over your encrypted database to an attacker.) In a local password manager, it doesn't work like that. A challenge-response mechanism can help there, but the cost/benefit analysis looks pretty different there, IMO.
- neurostimulant 4y agoEh, it's still a lot better than sms 2fa.
- sys_64738 4y agoThis costs a monthly subscription.
- SparkyMcUnicorn 4y agoGood. When it comes to hosted options, this is one I'd rather pay for to ensure long-term sustainability. If nobody is paying, they are probably the product.
- fletchowns 4y agoI mean we're talking about a monthly fee that is less than a cup of coffee, it's not exactly an exorbitant amount
- NoPicklez 4y agoWhat exactly about 1Password is safer, including their cloud hosted options? Curious as I may switch.
- deleted 4y ago[deleted]
- NoPicklez 4y agoWhat exactly about 1Password is safer, including their cloud hosted options? Curious as I may look at multiple options.
- SparkyMcUnicorn 4y agohttps://news.ycombinator.com/item?id=33820779 https://news.ycombinator.com/item?id=33820779
- freeplay 4y agoBitwarden is better, but Vaultwarden (the self-hosted version written in Rust) is the absolute best option. Host it yourself on a free tier VM in one of the clouds, configure a backup solution, and never worry about it again. And you don't need to trust anyone with your passwords. Use tailscale if you want to get fancy and keep it off the public internet or go the easy route and install fail2ban and expose it via public IP.
- Gatsky 4y agoCan you give some idea why Bitwarden is better?
- Barrin92 4y agofree for personal use, open source, cloud synced, no device limits. and as OP mentioned different server implementations if you want to host it yourself. No idea why people stick to any of the proprietary solutions.
- pprotas 4y agoYou have no idea why people don’t want to self-host a service? Or don’t have the knowledge to do it (securely)?
- Barrin92 4y agoYou don't need to with Bitwarden, you can if you want to. Like Lastpass by default Bitwarden store and syncs your passwords online.
- mobiuscog 4y agoI would prefer to not self-host as none of my family (who rely on passwords) are technical, and if anything should happen to me, they would be stuck.
- xienze 4y agoOpen source, self hosted. Has the nice bells and whistles like browser and mobile plugins.
- loeg 4y ago1password.
- Mister_Snuggles 4y agoEnpass may be worth a look. It doesn't do cloud syncing itself, but it lets you pick from a number of different providers (DropBox, iCloud, OneDrive, plus a few others) which you probably already use.
- phphphphp 4y agoI’ll second the 1Password recommendations, it’s fantastic software that is becoming better and better. If you’re comfortable with cloud syncing, I can’t imagine a better option than 1Password. A top 1Password tip is that the business plans include free family plans for every member, so if you can get your employer to use 1Password then you’ll be able to get your personal account for free (which would include your family, too). A very underrated deal! I recently logged back into my old LastPass account after 5 years and it was fascinating just how bad it is compared to 1Password.
- neuronexmachina 4y ago> A top 1Password tip is that the business plans include free family plans for every member Oh wow, thanks for that tip. My employer has 1Password Business and I had no idea about the deal: https://support.1password.com/link-family/ https://support.1password.com/link-family/
- ghosts_ 4y agoDashlane, 1Password & Bitwarden are the most popular I believe.
- tommieb 4y agoHow about https://pwsafe.org/ https://pwsafe.org/ and their releases on github https://github.com/pwsafe/pwsafe/releases?q=non-windows&expanded=true https://github.com/pwsafe/pwsafe/releases?q=non-windows&expa... ?
- nijave 4y agoI've been pretty happy with cloud-hosted Bitwarden. I used 1Password at work on macOS and the form fill didn't seem to work quite as well (that was ~2020-2021 so maybe things have changed) Not sure about 1Pass on Android, but Bitwarden works very well for me there (much better than Lastpass which afaik required a subscription to use the app)