Is 1password more secure?
They also have a development team that's very active. Lastpass had been coasting for years.
They've also listen to our bitching about requiring the master password every 2 weeks even with biometrics turned on, and rolled that back to a configurable setting
1pasaword is not perfect, but it’s far better than lastpass
I cannot fathom why anyone would look at the situation today and decide that the solution is more of the same.
Get an offline password manager and keep your valuables out of the cloud. I like Keepass, but there are plenty of FOSS solutions out there that allow you to actually own your data.
Just sayin'.
Get something that writes data in open format and does not interfere with how you store it. Eg. Keepass with some privacy focused file storage.
1Password has a fantastic track record.
Yes, tomorrow, their incentives might change. But the data is copied and available locally; if they start fucking with user data, we will see it coming.
Security is a lot about trust and trade-offs. This includes trusting someone who has shown themselves to be trustworthy, even if they might not be trustworthy tomorrow.
I remember too many SaaS companies with awesome reputation, that over time became sketchy (including Last Pass).
As for the teams - you shouldn't have shared accounts. Making introducing them convinient is bad idea. Where I work, we're audited for that and honestly it's very small issue if you give it a few minutes of thought.
Re teams, just because you shouldn’t have shared accounts doesn’t mean you can’t have shared secrets which end up in a password manager. Or more generally, the ability to have managed employee vaults. And regardless, shared accounts do happen, because some providers just suck. Making them as secure as possible is more important.