Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Not surprising to see another LastPass incident but I wonder why nowadays anyone would choose LastPass over 1password


I certainly wouldn't choose LastPass over 1Password, but given 1Password is deprecating local storage I wouldn't recommend 1Password anymore either.


I used to have a local only manager but then, obviously, syncing becomes a problem. And then it becomes a choice between syncing an encrypted blob using your own solution (potentially not very secure) vs using a provider who still treats your data as an encrypted blob with no access to the data and tries to do it securely. I think the provider is still more secure (again assuming the 1password access model not talking about LastPass-like providers) plus much more convenient. So if not 1password what would be a recommendation assuming syncing is required?


I switched to 1password after this breach was first announced, but I find it a lot more annoying to use (and I found Bitwarden even worse). Granted, nowhere near as annoying as the breach. Lastpass got in my way a lot less frequently though.


I prefer LastPass' featureset over 1Password, when I've trial them both, but I certainly don't prefer LastPass' opsec.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: