Hacker News Reader

Comment by astrodust | Hacker News Reader

LastPass is just so damned ugly and terrible to use compared to well crafted products like 1Password.

It's like the phpMyAdmin of password storage.

I don't get the hate. I've been a LastPass user for 5 years and it works for me most of the time. I've dabbled in 1Password, Chrome native password management, Firefox native, random Hacker News password manager recommendations. LastPass...still the best off...AND I got my brother and dad to use them and get excited about password safety.

What's so terrible about people using better and better passwords? It's not perfect but I am so much happier with my dad using LastPass versus the shitty password strategy he had before...it was post-it note password management.

Yeah, I also think it's interesting. I have been using LastPass forever and use 1password for work, and LastPass seems a lot easier to use for me. Both are better than using "password" as your password.

I will admit that I don't store my Google password in any password manager. That is the root of trust for everything, so I remember the password and use 2FA. The other accounts aren't as important.

I live in fear of forgetting my Google password (although I have several locations where my backup codes are stored) so I broke it into several parts and stored them with innocuous sounding names like "sister's birthday" and "plumber's contact info", but using a poem I know well as the phrase key. The times I've needed to refresh my memory it was very easy for me to retrieve it.

> ..my Google password in any password manager. That is the root of trust for everything

Why? Google is an Ad company...

Because usually Gmail is the place through which we can restore any other account.

Google for people getting blocked by Google ;) And there is nothing you can do.

Gmail. Reset password to almost any account via reset password Same is true for any email provider

LastPass on Windows doesn't stand out as being as shockingly ugly or ill-conceived as it does on macOS or iOS. It just sort of blends in with a lot of the undesigned applications that make up the Windows ecosystem.

That doesn't mean it isn't ugly. People deserve better.

It's still ugly though.

When I got to use the web version I thought it was a joke. Even Slashdot back in the day had more style and grace.

LassPass is ugly in a way that makes Oracle's Java download page look well-styled: https://www.oracle.com/technetwork/java/javase/downloads/ind...

> What's so terrible about people using better and better passwords?

This is a complete red herring - it's an argument for using password managers in general, not LastPass in particular. The issues here are whether it is being done in a way that unnecessarily compromises those better passwords.

There's nothing wrong with the idea of password managers, even physical ones might work for some people, but LastPass is just such a lazy, ugly, clunky implementation of one.

One organization I worked with accidentally created a password manager and it looked better than LastPass. Since it grew to become a huge security risk it got migrated to LastPass, which was barely useable and, at that time, got hacked, so that's a plus, and then migrated to 1Password the instant they added group vaults.

> It's not perfect but

I think it's fine to enjoy a product, but it's also good to recognise when something could be better. Anything can be better.

At least it works on all platforms well. 1password is a disaster on anything not Apple.

It's usability (last pass) has been getting worse though....

You used to be able to go to a username or password field, hit the down arrow, and it'd let you select through your various accounts. I hate touching my mouse and loved that interaction. Really wish that came back.

I hope they took it away for a good reason, like a security vulnerability.

1password works perfectly well as a browser extension on both my Arch and GalliumOS machines. There is also a CLI that spits out JSON, and you can find (or code) a wrapper around it (or use jq to display the JSON nicely). Client on windows at work works fine too. Don't really understand where you're getting at with your criticism.

Have you tried 1Password lately? They used to be trash, but I use them on mac, windows and android and it is far superior to last pass in almost every regard now.

It's shocking how badly designed and slow it is. They somehow manage to hide everything you'd use frequently under 10 clicks or taps, and by default organise things info irrelevant categories which you can only stop by removing each one individually.

I've been using 1Password for a few years. It feels a bit over-featured to me. It has worked reliably though.

As a not too impressed LastPass user, is it worth switching?

When LastPass got bought, I immediately looked for an out - I am happy with the move to 1Password.

Reply on news.ycombinator.com