Hacker News Reader

Comment by filipn | Hacker News Reader

So glad I switched to 1Password, haven't had an issue since. They provide an easy transfer of your passwords from LastPass, you can just follow their guide and be done in 5 minutes: https://support.1password.com/import-lastpass/

View on HN

I was a longtime LastPass customer, but the service just kept getting worse and worse, to the point where a year ago I realized I was spending more time fighting the user interface than it was saving me. And their support was absolutely useless.

So I also switched over to 1Password, and never looked back. It is such a refreshing and trouble free experience compared to LP, and the few times I needed to ask a question, their support team got right back to me with the correct answer the first time.

When you say, "Service kept getting worse and worse..." it means you contacted them multiple times. Yikes!

I've been using LastPass for 8 years and I've never needed any support, but I only pay for a personal version, not corporate.

I realize that's an anecdote, but what kinds of problems are people having?

I still use it but their support gets super defensive if you have any criticism about it. Their "new" 1pass X still sucks and recently has been going backwards in terms of usability. They keep promising feature parity between windows/mac too but this new browser plugin seems to be their fallback excuse. If I wasn't so heavily invested in it I'd switch in a heartbeat. I need something that works across ios/mac/windows and ideally without copying passwords to clipboard, that's pretty insecure.

Hi, I work for AgileBits, makers of 1Password.

I can't comment on the defensive part, but text can often be harder to parse in conversation so perhaps it was that? I generally find our support team to be pretty understanding but I am sorry if our support team didn't properly handle your concerns and feedback.

Feature parity is a tricky one. The Mac (and since it's shared code in a lot of ways, the iOS app) have been around a lot longer. Dating back to just a bit after I started here 8 years ago we started work on 1Password 4 for Mac and iOS.

The Windows app was rebooted completely a few years back and has been playing catch up since.

Feature parity is the ideal, but it isn't something that is going to happen overnight and we're still trying to do a variety of things to make that happen. But without slowing down our Mac team the Windows app will never really reach feature parity. With that in mind I know our Windows team really wants to try to be a lot closer and they're working hard to do it, but we're all sorry it hasn't moved faster than we'd all like.

If you have specific feedback feel free to write into our support and mention me (Kyle) and that your support request be answered by me. Please include a link to this thread just for reference and I'll make sure to look into all of your comments and concerns.

Again, very sorry we haven't met your expectations. Know that our expectations haven't been met either and that we're working hard to try to give everyone what they want on our Windows application.

Kyle

1Password Security Team

Kyle, for what it's worth as a counterpoint, I've grumbled a couple of times about bugs and the 1P team has not come across as defensive at all to me.

Particularly after the nonsense support LastPass gives, it was a pleasant experience, even if my grumbles hold true.

It's not a perfect product by any means but still light years better than LastPass in usability.

Hey, thanks!

We can't be the tool for everyone and we're always the first to recognize bugs exist. Unfortunately we also aren't able to fix them all just like I'm sure most people around here have backlogged bugs in the applications they work on. But we do try to prioritize based on severity and how many people are impacted.

I do appreciate the kind words though. We're not perfect, never will be, but we can sure try our best and I think that's all anyone really wants out of themselves.

If you ever run into issues feel free to reach out as well. Happy to help however I can!

Kyle

1Password Security Team

I switched my entire family to 1Password about a month ago after being on LastPass for several years. Overall, it's been a much better experience. But I have found that the 1Password X extension is quite limiting. There's basic functionality that is either part of the Mac app or has been part of LastPass for years that really slows me down. And, as a new user, it's extremely confusing trying to figure out what extension or app the company is actually wanting people to use.

Overall, I've been quite happy with it and my family has loved it.

I've never used LastPass, why do people use it (or other password managers) instead of the built in browser password manager?

Having a password manager on mobile is needed, so I need multi-device support. I was really happy with the password manager support the last iOS included. Password entry and persistence are streamlined.

Until not so long ago, the browsers' password storages provided absolutely zero security. They are better now, but still password managers offer some advantages. For me the most important is the ability to use multiple browsers. But there's other stuff: random password generator, ability to store custom key/value pairs, 2FA, etc.

> provided absolutely zero security.

I've been encrypting my Firefox password store for so many years I can't even remember.

Is that not secure or something?

Yes, actually. https://palant.de/2018/03/10/master-password-in-firefox-or-t...

(Maybe they've fixed this since, I'm not sure. It doesn't seem like security is being taken very seriously in any case.)

I use multiple browsers, and store credentials for things other than websites.

Every built-in browser password manager I've seen seems to be just a password-protected list of (URL, name, password) tuples. They're the most bare-bones possible implementation.

There's no (non-cloud) syncing, or easy backups. There's no file attachments, or custom fields, or non-website-based accounts. There's no automatic checking for duplicate passwords, or old passwords, or alerts for websites known to have been compromised.

I don't use a web-based password manager like LastPass because I don't really trust it (for either security or reliability), but local password managers are great for storing all kinds of private data. How would I store my driver's license, my storage unit lockbox combo, or my marrow donor registry ID in a web browser?

had a brief stint with lastpass and hated my life. 1Password is just infinitely better, no contest.

Long time Lastpass user here - good god their UI is terrible. It really feels like a first pass to get the functionality working and then they just gave up. Kept up hope for the last like 5 years that it would get better. I should probably just start looking at alternatives at this point. Only reason I haven't is that my vault is a mess and I'm not looking forward to organizing when I finally move it.

>but the service just kept getting worse and worse

And more and more expensive. I used it for 8 years, cancelled this year after I noticed it was $45USD per year (over $50 CAD!). Impossible to justify with so many cheaper or free alternatives.

My version of Lastpass is free.

LastPass was also acquired by LogMeIn, which is notorious for really bad software (I'm looking at you GoToWhatever). I switched over to 1P two years ago and haven't looked back. I don't trust LastPass/LogMeIn for as far as I can throw.

That being said, having A password manager is better than having none at all.

Bitwarden is also very good

I went from LastPass to Bitwarden and really like it also.

LP to Bitwarden as well here. The only issue I've found so far is MFA doesn't seem to be working on the (Linux) Firefox plugin, this could be a user error issue as I've not had time to look into it yet (only noticed it this morning).

MFA is working fine for me with Firefox on both Ubuntu and Fedora.

Just had a quick dig it appears that it will ask for MFA when logging in for the first time or if you log out and then back in but not when just unlocking the vault which is a little disappointing but not the end of the world.

Also switch to Bitwarden. Never had any issues. Open source and free.

Same here. very happy paying for customer as well

Looks good, except I'm surprised by 'pay more to a third company to use MFA' in the enterprise offering. I'd expect MFA to be part of the enterprise offering and not require me to trust another company.

Same. I switched after their thanksgiving 2018 outage and haven't looked back. Just about everything about 1Password is better than LastPass.

Same. I switched to 1Password a few years back after one of the lastpass security issues. I’ve been incredibly happy with the service and quality of software.

1Password is excellent, been using them for years, but don't be surprised if they take a dip in quality in the coming years: a PEG invested a large amount of money in them late last year. Was really upset when I saw that.

> a PEG invested a large amount of money in them late last year.

What is a PEG?

I believe it stands for Private Equity Group.

Which password manager would you say has the brightest future, for someone looking to start using one with no prior experience besides Chrome account sync?

Honestly it doesn't matter that much, it's fairly easy to change.

1password is nice for the polish especially on Mac; Bitwarden is nice to use, open-source, and the free plan is sufficient for most; and KeepassXC is a stable offline solution (that you can sync yourself).

I'm more than a decade in on my 1Pwd journey. Loved it the whole time!

I tried that once but ran into so many errors for passwords that contained characters like ", or ;" that I gave up. Is there a way around this other then copying every entry manually?

You can edit the password recipe for websites that suck and don't allow certain characters.

I did the same switch like 5 years ago, and I remember having to `sed` (i.e. global find + replace) the LastPass output .csv to fix special characters before importing it into 1Password. Sadly I don't remember any more detail than that, but yes, there may be some manual massaging required. YMMV.

Yes, the lastpass exporter has an issue. You can do a search and replace.

Or you can do what I did and when I reach a site that had an issue, I would just look at the password and there would be an obvious parsing error, e.g "&" is instead "amp&" and would just modify it manually.

Only happened a few times and then all is good.

https://github.com/bitwarden/help/blob/master/_articles/impo...

BitWarden

Reply on news.ycombinator.com