Comment on More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user

tst123@lemmy.world ⁨1⁩ ⁨year⁩ ago

• smolyeet@lemmy.world ⁨1⁩ ⁨year⁩ ago

  The idea is fine. Still trusting lastpass was the bad idea. Others have much better implementations to protector your vault and don’t drop the ball on security time after time.

  source

  • serratur@lemmy.wtf ⁨1⁩ ⁨year⁩ ago

    They might have better implementation, but that only means it will take longer time before a data breach happens, it doesn’t stop them.

    source
• MagneticFusion@lemm.ee ⁨1⁩ ⁨year⁩ ago

  Preech. I switched from Bitwarden to Keepass

  source

  • evranch@lemmy.ca ⁨1⁩ ⁨year⁩ ago

    I use Syncthing to keep my Keepass files synchronized on my devices. All the benefits of cloud storage, but my password file never leaves my control.

    source

    • captain_aggravated@sh.itjust.works ⁨1⁩ ⁨year⁩ ago

      I do exactly this.

      source
    • HaggierRapscallier@feddit.nl ⁨1⁩ ⁨year⁩ ago

      Great idea! I rely on Firefox’s service, would you recommend I switch?

      source

      • evranch@lemmy.ca ⁨1⁩ ⁨year⁩ ago

        Personally I don’t like to rely on anyone’s cloud services for mission critical applications like password storage, since they have a history of being discontinued without notice.

        I do trust Mozilla a lot more than Google, though.

        With Syncthing at least if the discovery servers go down you still have a local copy as well as off-site backups, and can easily migrate to some other sync solution as your password manager is not tied to your browser.

        source

        • -> View More Comments
• Blackmist@feddit.uk ⁨1⁩ ⁨year⁩ ago

  It’s OK as long as you’re the only one with the key to it.

  If your storage provider can decrypt it, so can anybody who hacks them or works for them.

  Sometimes these are the same people.

  source