Hacker News Reader

Comment by maguay | Hacker News Reader

Suddenly, I'm glad I switched to 1Password.

Yeah 1Password is pretty awful when you consider the amount of features you get with LastPass like multi-factor authentication. 1Password relies on Dropbox. Your passwords are all stored on your computer. Granted they're in an encrypted format, but if you have a jerk for a room mate they could copy your encrypted files, key log your vault password, and have access to all your passwords.

On the other hand, if you get my LastPass password you better have my grid too (I keep it online so I can access it wherever, password protected). Additionally LastPass is working on SMS codes for login.

The there's somebody how can key log hardware you (think you can) trust, you're hosed whatever security you're relying on.

Negative, LastPass can generate one-time passwords which you can then use on computers you suspect to be insecure.

But most of the damage from keyloggers happens to people who do NOT suspect they are using an insecure system (their own).

But you can control the risk of exposure to keyloggers. You have zero control over risks to LastPass's infrastructure - which, as this blog post mentions, is a much juicier target than your passwords on their own.

Unfortunately, there's always potential security vulnerabilities: http://xkcd.com/538/

LastPass also has YubiKey support for really nice 2-factor auth.

Reply on news.ycombinator.com