Hacker News Reader

Comment by TheRealDunkirk | Hacker News Reader

Lastpass (http://lastpass.com/) has been my holy grail of vital cross-platform apps for many years now, as I've switched from Linux to Mac and back and forth and always with the Windows. Sure, it's a browser plugin, but it works just as well with Chrome and Safari (and probably Firefox and, <gulp>, IE). Their touch-unlockable iOS app is just icing on the cake. I'm not getting a dime for this endorsement. It's just been a real lifesaver, for such an important application category (at one time, as a sysadmin, I had 650 passwords in the vault), and I never have to worry about what platform I'm running at the moment.

View on HN

It's too bad that LastPass feels like a highschool project by a dude and a couple of friends.

Zero consistency between the browser plugin, the vault, the app, and the mobile app. Even within the vault there's little consistency between different panes.

I'd like to believe that they know what they're doing crypto-wise, but damn that UX feels mickey-mousey. Even something as simple as using up/down over the autocomplete list misbehaves.... ;(

... and don't get me started on Basic Auth support on Chrome OSX

Basic auth is a browser limitation. If you visit a site through the LastPass menu, it'll do the basic auth dance.

I found LastPass terrible from a UX perspective. Sure it must claim a lot of checkboxes on a feature sheet, but the applications/plugins/website are buggy and inconsistent with each other. It only works well when you use it for the narrow purpose of automatic website logins. Throw any other password at it, or dare to try a different workflow, and the whole thing just crumbles.

I only use it because I have to at work. 1Password is much more convenient.

That is also my experience. LastPass is pretty good if you use it with website logins, with everything else not.

However I think that is something that could easily be improved once the guys over at LastPass realize they must invest more in the UX. I for myself did already open a support ticket for that. If everybody would do this, this might raise the attention.

On the other side it's not so bad from a functional only perspective and the pricing is fair - I'll give it a chance and stay another few months with them.

There is a certain amount of trust you put into lastpass due to it's closed nature that you wouldn't by using something like KeePass, isn't there?

I've read multiple independent audits of the LastPass client (such as http://www.martinvigo.com/a-look-into-lastpass/) that haven't found any major issues, and for the issues they do find the LastPass team has always responded promptly. On the server side, LastPass's service is basically just encrypted blob synchronization, so the software doesn't particularly matter.

I use Lastpass, but it seems a tad janky. It's saving grace is that it's ubiquitous and works on every platform I can think of.

check out https://github.com/lastpass/lastpass-cli

I note this above but want to emphasize the fact that lastpass-cli supports the lastpass two factor options. For anyone looking for a tool like this for use both in browser and in scripts, it's great to have two factor natively supported in both places.

Reply on news.ycombinator.com