https://www.bleepingcomputer.com/news/security/lastpass-users-furious-after-being-locked-out-due-to-mfa-resets/
LastPass password manager users have been experiencing significant login issues starting early May after being prompted to reset their authenticator apps.
This is not a good reason, but it’s time consuming switching to another password vault. shields up
I switched from LastPass to Bitwarden, years ago now, and the whole process took roughly 5 minutes. I'm not sure if something has changed since then, or if it's more complicated to switch to something other than Bitwarden, but my experience is that it at least can be simple.
There were issues exporting passwords from LastPass when I tried moving after the first security breach. It would only create a CSV with a few rows and it was an issue for many at the time. I couldn’t help be cynical about the timing.
Oh, that definitely makes sense. I switched away as concerns around third-party trackers came up, in 2021. If I'd only been able to export a CSV with a few rows, I'd have been upset about it.
The change was LastPass messing around with their membership options.
I had LastPass for years. I eventually decided to pay for it. Then they decided to remove premium all together...only to add it back by taking away features. One of those features was being able to use both mobile and web.
I opted for mobile, because I always have my phone with me, and the app has biometric unlock, whereas web does not.
But you can't save and export your LastPass via mobile. Has to be web. So I had to switch that. And I'm just now getting to a point where I can transfer.
You can import your password database from lastpass to bitwarden.
The LastPass export doesn't capture attachments. So depending how heavily you used that feature. It can be a bit more complicated.
Just use Bitwarden, Keepass, or whatever your choice. I'm surprised people still trust Last Pass.
Bitwarden, Keepass
Do you mind if I pass your number on to my mother and father in law for tech support in setting it up on their Windows laptops and iPhones? I would do it, but I already have a full time job.
If they have a windows laptop they probably also have an android phone. In that case it would make the most sense to have them use the chrome/google password manager.
I promise they have win+iOS. iMessage is the only reason that I have an iPhone. Well, that and the inability for any other messaging service to provide reliable real-time messaging with read receipts (both critical for core-family safety reasons; friends and work colleagues get my GVoice number which, ironically, worked better on iOS than Android at the time I switched).
As a bonus, my F-I-L currently uses the Notes app as his vault (not the secure version, just a note entitled "Passwords") and my mother uses a combination of several slips of paper floating about her office, Google Chrome's internal password memory system, and a system involving her dog's name, a site identifier, and the last four digits of a phone number she had as a child. That last one is pretty good, except that the old bird is really bad at remembering which letters she capitalizes and which part of the URL she's going t use as the identifier, so some sites are just easier for her to get a password reset every time she uses them. I'm actually getting jittery just thinking about it.
Hahahaha say no more I get PTSD flashbacks to my father in law getting angry at me because he forgot his password.
Sometimes just defaulting to password recovery through “i forgot my password” is sometimes the best bet.
If they’re not familiar with computers or anything it’s best to use baked in applications. I wouldn’t want to explain Bitwarden to my mother.
Went to 1password shortly after the first (maybe) debacle and have been extremely pleased since. I know it's a similar risk with a hosted database but the convenience is hard to beat
I know it's not a guarantee, but this is why I switched to Bitwarden. With Open Source software it's less likely that this fuckups happen.
Some time back I was choosing between 1Password and LastPass. It seemed like a close contest at the time. But I’ve been very glad I chose 1Password in the time since then.