This thread is permanently archived
Is last Pass worth it?
| always use a password that different, actually i use a password from an impression that web or game
| >>74030
That's why 2FA (two factor authentication) is a thing. LastPass fixes one problem, which is that humans are never inherently good at making "randomised" password for each and every site they visit.
The trade-off is that you have one master password that *should* be strong. This master password shouldn't be something stupid like "password123" or "password1", that will kill all the benefit of any password manager,
| 2FA solves the problem you may have with password managers. This means that whenever an attacker tries to hack into your password manager account, they'll still need to have the device that acts as a key to the 2FA.
| In short, yes, it will become very inconvenient but if you have a work account and you need security, sometimes you'd want to trade convenience for security itself.
I mean, with 2FA and password manager, the usual login flow goes like this:
Password manager login -> Get the password from password manager -> Get the prompt for 2FA -> Logged in
Which is darn complex, I know, but it's pretty useful to keep things secure.
| (dammit red text)
| Get KeePass
| ^ I use keepass, it's offline so don't need to worry about last pass having another beach, you can use a password and a key file, it's got auto type, and a very nice password generator
| I should say it's encrypted with your password and the key file in this case, without one you can't open the file at all, I use this so I can keep it in cloud storage and not worry about it so much if it gets breached because no one has the key file
| ^ indeed
| +1 for Keepass. Putting all your passwords behind a master password is one thing, but then putting everything on someone else servers seems like a really bad idea. Even if it’s all encrypted, Lastpass has been breached, and I’d rather not have even hashes of my passwords out there.
Syncthing is a great say to sync your database across devices.
| I just use nextcloud as my cloud service, don't need to worry about anyone else having my data that way
| I've been wanting to leave lastpass for keepass, but my question is.. how to make it auto-fill like lastpass?
This thread is permanently archived
| I tried it once, but for me it seems pretty inconvenient and insecure to have everything tied to one password, even if all of the other passwords are super long. How is it more secure than using a handful of passwords for all of my accounts?