Hacker News Reader

Comment by givehimagun | Hacker News Reader

I don't get the hate. I've been a LastPass user for 5 years and it works for me most of the time. I've dabbled in 1Password, Chrome native password management, Firefox native, random Hacker News password manager recommendations. LastPass...still the best off...AND I got my brother and dad to use them and get excited about password safety.

What's so terrible about people using better and better passwords? It's not perfect but I am so much happier with my dad using LastPass versus the shitty password strategy he had before...it was post-it note password management.

View on HN

Yeah, I also think it's interesting. I have been using LastPass forever and use 1password for work, and LastPass seems a lot easier to use for me. Both are better than using "password" as your password.

I will admit that I don't store my Google password in any password manager. That is the root of trust for everything, so I remember the password and use 2FA. The other accounts aren't as important.

I live in fear of forgetting my Google password (although I have several locations where my backup codes are stored) so I broke it into several parts and stored them with innocuous sounding names like "sister's birthday" and "plumber's contact info", but using a poem I know well as the phrase key. The times I've needed to refresh my memory it was very easy for me to retrieve it.

> ..my Google password in any password manager. That is the root of trust for everything

Why? Google is an Ad company...

Because usually Gmail is the place through which we can restore any other account.

Google for people getting blocked by Google ;) And there is nothing you can do.

Gmail. Reset password to almost any account via reset password Same is true for any email provider

LastPass on Windows doesn't stand out as being as shockingly ugly or ill-conceived as it does on macOS or iOS. It just sort of blends in with a lot of the undesigned applications that make up the Windows ecosystem.

That doesn't mean it isn't ugly. People deserve better.

> What's so terrible about people using better and better passwords?

This is a complete red herring - it's an argument for using password managers in general, not LastPass in particular. The issues here are whether it is being done in a way that unnecessarily compromises those better passwords.

There's nothing wrong with the idea of password managers, even physical ones might work for some people, but LastPass is just such a lazy, ugly, clunky implementation of one.

One organization I worked with accidentally created a password manager and it looked better than LastPass. Since it grew to become a huge security risk it got migrated to LastPass, which was barely useable and, at that time, got hacked, so that's a plus, and then migrated to 1Password the instant they added group vaults.

> It's not perfect but

I think it's fine to enjoy a product, but it's also good to recognise when something could be better. Anything can be better.

It's still ugly though.

When I got to use the web version I thought it was a joke. Even Slashdot back in the day had more style and grace.

LassPass is ugly in a way that makes Oracle's Java download page look well-styled: https://www.oracle.com/technetwork/java/javase/downloads/ind...

Reply on news.ycombinator.com