Hacker News Reader

Comment by arjie | Hacker News Reader

I use LastPass and I can't recommend it enough. It's fantastic and I have different passwords for everything simply because I never bother making passwords. I just hit the random function on it.

I still have my email passwords memorized, though.

This is honestly the best service I've ever paid for. It has never failed me, and it substantially improves my life.

View on HN

Strip (https://www.zetetic.net/blog/) is a mature and multi-platform local password manager that does not need a cloud connection, and can optionally sync from mobile to a local desktop. Made by the developers of open-source SQLCipher for SQLite, https://github.com/sqlcipher/sqlcipher

I wish they would integrate with iOS8 Safari as an extension.

I use LastPass and think it's great as well. I've tried to recommend it to others though and the common reply is "that doesn't sound secure enough for company policy".

They don't seem to realise though that their usual approach of sharing passwords over email, using the same password for several logins so it's easy to remember and using easy to remember passwords in general is much more insecure.

Services like LastPass make it practical for you to use impossible to guess passwords, different passwords for every site and let you share passwords securely.

My key argument when I've convinced past employers to implement it: you already outsource all of the hard parts of your security. Antivirus, firewall, AD permissions, server config, all of it. They either bought a product to fit the need or hired a consultant to do the advanced stuff. $12/year is pretty cheap to hire a dedicated team of security wonks to safeguard your passwords, IMO.

It's not the cost that's the issue though, people don't like the idea of passwords being stored in a single place on a internet connected computer. I mention that you can secure password access behind two factor authentication but it doesn't get around the knee-jerk reaction often. Sharing lots of passwords when working with a team remotely is especially painful when password managers are not allowed...

That's all built in on Safari now. It's dead simple to use. But obviously it only works inside the Apple ecosystem.

I'm surprised Google hasn't built it in to Chrome yet.

Chrome does have a password generator and password syncing though I think the generator is hidden behind a flag still.

I use LastPass too and I am happy with it but I really wish they would do something about that UI. Not a very good experience, IMO.

My issue with lastpass is that it's basically unusable when you don't use it as an extension.

I'm not willing to load a proprietary blob that actively manipulates the dom and passwords every time I visit a page.

Lastpass is surprisingly slow however - and that affects general browsing performance.

Reply on news.ycombinator.com