Password manager

Questions on how we spend our money and our time - consumer goods and services, home and vehicle, leisure and recreational activities
Post Reply
Topic Author
k b
Posts: 144
Joined: Tue Oct 15, 2013 8:43 pm

Password manager

Post by k b »

Starting a separate chain to post these Qs hoping for specific guidance. I previously posted them in the Mac Air thread and found a lot of good info there, but would still like clarity on the following. Honestly, I think most of the usual choices would work. But it is very likely that I will be tied into whichever one I choose for a long time. So, being choosy here.
  • Lastpass seems to be most commonly used. I see that they offer a free version, which does the job for me. Any reason why a "regular" household would need Premium?

    How do I compare ACROSS offerings like Lastpass, Bitwarden, 1Password, etc.?

    What is the business model for free providers beyond enticing me to upgrade? That is, am I leaving any of my data with them?
FYI, we're a "hybrid" household :D - Windows / Mac laptops + iphones + ipad (please don't ask WHY we need so many devices :) :) ) So, I am looking for a browser add-on that I could add to any browser / machine. Then, I could just login to Lastpass or Bitwarden first and then head to whichever site I want to visit.

Thanks for all responses.
squirm
Posts: 3077
Joined: Sat Mar 19, 2011 11:53 am

Re: Password manager

Post by squirm »

I use lastpass for years and happy with it. i see no reason to switch, plus it would be a pain.
Gadget
Posts: 463
Joined: Fri Mar 17, 2017 1:38 pm

Re: Password manager

Post by Gadget »

My recommendation is Bitwarden if you want to use a free one and don't need to share passwords with anyone.

I'd recommend 1Password if you want the most spouse friendly one that is really easy to share vaults/passwords. And you don't mind paying for one.
Laundry_Service
Posts: 238
Joined: Wed Sep 15, 2010 11:52 am

Re: Password manager

Post by Laundry_Service »

I recently started using Bitwarden and so far I give it excellent marks.
Marseille07
Posts: 1083
Joined: Fri Nov 06, 2020 1:41 pm

Re: Password manager

Post by Marseille07 »

I just use KeePass as I don't have much need to store my passwords online then later worry about their security.
Topic Author
k b
Posts: 144
Joined: Tue Oct 15, 2013 8:43 pm

Re: Password manager

Post by k b »

Gadget wrote: Tue Jan 12, 2021 4:15 pm My recommendation is Bitwarden if you want to use a free one and don't need to share passwords with anyone.

I'd recommend 1Password if you want the most spouse friendly one that is really easy to share vaults/passwords. And you don't mind paying for one.
Could you explain what "don't need to share passwords with anyone" means?

I am thinking of a single account that I could (or one of the family members could) login from any device / any browser in the household. If another family member logs into the same single account, isn't that the same as 'sharing' ?
Marseille07
Posts: 1083
Joined: Fri Nov 06, 2020 1:41 pm

Re: Password manager

Post by Marseille07 »

k b wrote: Tue Jan 12, 2021 4:27 pm
Gadget wrote: Tue Jan 12, 2021 4:15 pm My recommendation is Bitwarden if you want to use a free one and don't need to share passwords with anyone.

I'd recommend 1Password if you want the most spouse friendly one that is really easy to share vaults/passwords. And you don't mind paying for one.
Could you explain what "don't need to share passwords with anyone" means?

I am thinking of a single account that I could (or one of the family members could) login from any device / any browser in the household. If another family member logs into the same single account, isn't that the same as 'sharing' ?
Violation of ToS, unless you somehow try to claim your family as an organization.

"The User," "You," and "Your" refer to the individual person, company, or organization that has visited or is using the Website or Service; that accesses or uses any part of the account; or that directs the use of the account in the performance of its functions. A User must be at least 13 years of age.
Topic Author
k b
Posts: 144
Joined: Tue Oct 15, 2013 8:43 pm

Re: Password manager

Post by k b »

Marseille07 wrote: Tue Jan 12, 2021 4:33 pm
k b wrote: Tue Jan 12, 2021 4:27 pm
Gadget wrote: Tue Jan 12, 2021 4:15 pm My recommendation is Bitwarden if you want to use a free one and don't need to share passwords with anyone.

I'd recommend 1Password if you want the most spouse friendly one that is really easy to share vaults/passwords. And you don't mind paying for one.
Could you explain what "don't need to share passwords with anyone" means?

I am thinking of a single account that I could (or one of the family members could) login from any device / any browser in the household. If another family member logs into the same single account, isn't that the same as 'sharing' ?
Violation of ToS, unless you somehow try to claim your family as an organization.

"The User," "You," and "Your" refer to the individual person, company, or organization that has visited or is using the Website or Service; that accesses or uses any part of the account; or that directs the use of the account in the performance of its functions. A User must be at least 13 years of age.
Got it. Wasn't aware (rookie, as you can see :) ). Thanks for this.

Going to be me MOST of the time. Others, only in an emergency.
User avatar
cowdogman
Posts: 722
Joined: Sat Dec 16, 2017 7:44 pm
Location: Washington State

Re: Password manager

Post by cowdogman »

I have used LastPass forever and started to pay for the premium version several years ago so that I could have access on my iPhone (included in the free version now). Premium gives you a lot of support/recovery options, including recovery options for a designated contact--wife, child, etc. Most importantly, it's inexpensive and I like to support the company.

Don't forget about the LastPass family plan.
Gadget
Posts: 463
Joined: Fri Mar 17, 2017 1:38 pm

Re: Password manager

Post by Gadget »

k b wrote: Tue Jan 12, 2021 4:37 pm
Marseille07 wrote: Tue Jan 12, 2021 4:33 pm
k b wrote: Tue Jan 12, 2021 4:27 pm
Gadget wrote: Tue Jan 12, 2021 4:15 pm My recommendation is Bitwarden if you want to use a free one and don't need to share passwords with anyone.

I'd recommend 1Password if you want the most spouse friendly one that is really easy to share vaults/passwords. And you don't mind paying for one.
Could you explain what "don't need to share passwords with anyone" means?

I am thinking of a single account that I could (or one of the family members could) login from any device / any browser in the household. If another family member logs into the same single account, isn't that the same as 'sharing' ?
Violation of ToS, unless you somehow try to claim your family as an organization.

"The User," "You," and "Your" refer to the individual person, company, or organization that has visited or is using the Website or Service; that accesses or uses any part of the account; or that directs the use of the account in the performance of its functions. A User must be at least 13 years of age.
Got it. Wasn't aware (rookie, as you can see :) ). Thanks for this.

Going to be me MOST of the time. Others, only in an emergency.
I didn't mean as a TOS violation.

Let's say you and your spouse both have a Facebook account. You both have gmail accounts. Every time you try to log in to one of those sites, it'll show every login for it if you share one account. It can be annoying if you mis-click on the wrong one.

If instead, you each have a 1Password account and share a vault, you can filter out passwords. So each person can have a private vault that only they see. And you could have a shared vault for shared logins. And you can set the defaults for which vaults display by default. So my spouse's passwords don't display by default, but if I need to log in to her accounts (in a shared but filtered out vault) then I can switch to that vault. Or visa versa. It's very convenient for us.

Also, the need for 2 factor authentication is debatable with how 1Password is setup with a secret key, but if you do use a password manager that requires 2 factor authentication (I'd recommend it on all others that don't have a secret key), then the spouse who doesn't control the 2nd factor will be annoyed. If you share one account and it decides you need to redo your 2nd factor to login, you will have to be right next to your spouse when they need to login to something. That isn't always the case.
User avatar
BolderBoy
Posts: 5177
Joined: Wed Apr 07, 2010 12:16 pm
Location: Colorado

Re: Password manager

Post by BolderBoy »

k b wrote: Tue Jan 12, 2021 4:05 pmHow do I compare ACROSS offerings like Lastpass, Bitwarden, 1Password, etc.?
Do you mean like this: https://en.wikipedia.org/wiki/List_of_password_managers
"Never underestimate one's capacity to overestimate one's abilities" - The Dunning-Kruger Effect
Beck49
Posts: 158
Joined: Sun Nov 24, 2013 8:15 pm

Re: Password manager

Post by Beck49 »

For decisions like this I often look to reviews on Wirecutter, the NY Times version of consumer reports with readable evaluations.

https://www.nytimes.com/wirecutter/revi ... ompetition

They have an evaluation of the pword managers described by others, as well some additional options.

My only comment is that even the premium versions are not that expensive. This kind of protection is too important to worry about another $30 or $50 a year. Good luck.
dboeger1
Posts: 242
Joined: Fri Jan 13, 2017 7:32 pm

Re: Password manager

Post by dboeger1 »

For your common, basic use case, the free versions of LastPass and Bitwarden are likely to be pretty much identical in function. They have similar free tiers. The biggest difference, and the reason I went with Bitwarden, is that they have free native desktop clients. I think LastPass does not have native desktop clients. However, I've since come to realize that's really not a huge deal because you can always open a browser on a desktop. I suppose there might be edge cases where Bitwarden's client could come in handy, like maybe you want to use it on a relative's computer but don't want to pollute their browser with plugins they don't use. It's a stretch, but it is a minor difference. On the other hand, LastPass is more common, and perhaps more concretely, I've heard the interface is a prettier and more intuitive. Bitwarden admittedly looks and feels like something a software nerd designed for themself. You'll probably have a slightly easier time picking up LastPass; at the very least, you'll find more search results for help and things like that. None of these differences are that big of a deal though.

Beyond the free editions, I don't know much about LastPass, but paid Bitwarden basically adds the functionality of something like Authy, where you can scan QR codes and use it for 2FA. As much as I wouldn't mind paying for premium Bitwarden to add that feature, I actually still use Authy separately because I want to have that functionality regardless of whether I continue paying or not. But it is a nice option if you want that all in one app. Back to the topic of Bitwarden's somewhat ugly but functional interface, it actually looks like this feature is available in the free version, but it sort of just silently doesn't work until you actually pay, which is kind of weird.

Another huge thing with Bitwarden is that you can host your own instance of it. In other words, instead of storing your private data with the company, you can actually host it yourself somewhere. This gives you a potential future alternative in case they get compromised or you have some other reason to prefer self-hosting, such as within a protected intranet. You likely won't use this for the foreseeable future, but I think it's actually a really cool option. Using LastPass obviously doesn't prevent you from ever switching over to self-hosted Bitwarden, but if nothing else, you'd be familiar with the web site and interface.
dboeger1
Posts: 242
Joined: Fri Jan 13, 2017 7:32 pm

Re: Password manager

Post by dboeger1 »

Gadget wrote: Tue Jan 12, 2021 7:34 pm if you do use a password manager that requires 2 factor authentication (I'd recommend it on all others that don't have a secret key), then the spouse who doesn't control the 2nd factor will be annoyed. If you share one account and it decides you need to redo your 2nd factor to login, you will have to be right next to your spouse when they need to login to something.
My spouse thanks you for bringing this up, lol. She hates trying to access my PayPal and other accounts with 2FA because it means using both Bitwarden and Authy, and she hasn't quite figured that out yet. If only she would stop using my payment accounts and create her own!

What I will say is that if you really need or want spouses to be able to access each other's accounts, then there's really no sense in using a 2FA factor that is tied to only 1 of the 2 spouses. Something like Google Authenticator only makes sense as long as it's a fair assumption that the registered device is with the person rightfully trying to access their account. For spouses, I much prefer something like Authy, which still gives you 2FA, but allows both to access it by essentially remembering another password as a 2nd factor rather than a specific device.
Topic Author
k b
Posts: 144
Joined: Tue Oct 15, 2013 8:43 pm

Re: Password manager

Post by k b »

dboeger1 wrote: Tue Jan 12, 2021 9:38 pm
Gadget wrote: Tue Jan 12, 2021 7:34 pm if you do use a password manager that requires 2 factor authentication (I'd recommend it on all others that don't have a secret key), then the spouse who doesn't control the 2nd factor will be annoyed. If you share one account and it decides you need to redo your 2nd factor to login, you will have to be right next to your spouse when they need to login to something.
My spouse thanks you for bringing this up, lol. She hates trying to access my PayPal and other accounts with 2FA because it means using both Bitwarden and Authy, and she hasn't quite figured that out yet. If only she would stop using my payment accounts and create her own!

What I will say is that if you really need or want spouses to be able to access each other's accounts, then there's really no sense in using a 2FA factor that is tied to only 1 of the 2 spouses. Something like Google Authenticator only makes sense as long as it's a fair assumption that the registered device is with the person rightfully trying to access their account. For spouses, I much prefer something like Authy, which still gives you 2FA, but allows both to access it by essentially remembering another password as a 2nd factor rather than a specific device.
We use 2FA, but the second level of authentication is linked to our cellphones. A code is sent to the cellphone and is valid for 30 minutes.

Sites like Fidelity, Chase and Vanguard allow TWO different cellphone numbers to be provided for this purpose. Once the first level of authentication (password) is completed, these sites ask you to choose which phone to send the code to. So, if you provide your cellphone and your spouse's, whoever logs in using the common pw can request for the code to be sent to the phone of choice.
Topic Author
k b
Posts: 144
Joined: Tue Oct 15, 2013 8:43 pm

Re: Password manager

Post by k b »

All - just a quick note to say THANKS for your feedback and time.

I will need read these points again (and read up the link posted by Bolderboy) over the 3-day weekend before I revert with anything meaningful.
jhsu802701
Posts: 195
Joined: Fri Apr 03, 2020 2:42 pm

Re: Password manager

Post by jhsu802701 »

I use KeePassXC (https://keepassxc.org/). It's free, open source, and available for Linux, MacOS, and Windows. No matter which OS you use, you're covered.

If you wish, give the other password managers a try. The important thing is to use one so that you don't commit no-nos like writing down your passwords on paper, using the same password everywhere, or using passwords that are easy to crack.
Turbo29
Posts: 870
Joined: Tue May 01, 2018 7:12 am

Re: Password manager

Post by Turbo29 »

jhsu802701 wrote: Thu Jan 14, 2021 5:12 pm I use KeePassXC (https://keepassxc.org/). It's free, open source, and available for Linux, MacOS, and Windows. No matter which OS you use, you're covered.

If you wish, give the other password managers a try. The important thing is to use one so that you don't commit no-nos like writing down your passwords on paper, using the same password everywhere, or using passwords that are easy to crack.
+1
It is by the goodness of God that in our country we have those three unspeakably precious things: freedom of speech, freedom of conscience, and the prudence never to practice either of them. --M. Twain
VictorStarr
Posts: 126
Joined: Sat Jan 04, 2020 10:13 pm
Location: California

Re: Password manager

Post by VictorStarr »

Gadget wrote: Tue Jan 12, 2021 4:15 pm I'd recommend 1Password if you want the most spouse friendly one that is really easy to share vaults/passwords. And you don't mind paying for one.
+1
tm3
Posts: 239
Joined: Wed Dec 24, 2014 7:16 pm

Re: Password manager

Post by tm3 »

k b wrote: Tue Jan 12, 2021 4:05 pm
How do I compare ACROSS offerings like Lastpass, Bitwarden, 1Password, etc.?

I read a lot of online reviews and watched some YouTube reviews but it's hard to tell what is real and what is sales. But I eventually narrowed it down to Bitwarden and 1Password.

I went to the support forums for both, trying to get a feel for response time and support and for what kind of problems users were having.

I signed up for a free Bitwarden account and a 30 day free trial of 1Password. I entered a dozen or so of my logins in both and compared for a couple of weeks. I found that 1Password kept warning me that it soon would no longer work with my version of Safari (and to get the "correct" version I would have to update the whole OS), and that Bitwarden warned me of potential security issues when 1Password's "Watchtower" said all was OK. Other than that both worked pretty seamlessly but I found Bitwarden a little more intuitive and I concluded that the cost of 1Password is not justified for my use.

However, rather than over analyzing like I did you might just want to pick one. They all are pretty much electronic index card storage, and I think the key is to get a set of secure passwords established ASAP -- the "fluff" that one offers over another IMO is not much to worry about*.

*With the exception of the ability to Password Autofill on the iPhone. This is a key feature for my use and one of the big players (not 1Password or Bitwarden) does not offer it.
User avatar
LazyNihilist
Posts: 949
Joined: Sat Feb 19, 2011 9:56 pm

Re: Password manager

Post by LazyNihilist »

jhsu802701 wrote: Thu Jan 14, 2021 5:12 pm I use KeePassXC (https://keepassxc.org/). It's free, open source, and available for Linux, MacOS, and Windows. No matter which OS you use, you're covered.

If you wish, give the other password managers a try. The important thing is to use one so that you don't commit no-nos like writing down your passwords on paper, using the same password everywhere, or using passwords that are easy to crack.
I strongly recommend KeePassXC too.
The strong do what they can and the weak suffer what they must -Thucydides
discman017
Posts: 133
Joined: Mon Jan 28, 2008 1:07 pm

Re: Password manager

Post by discman017 »

I use Bitwarden and love it. But users of many other password managers are very satisfied, too. That's probably because any password manager is sooooo much better than the alternatives (same password for every site, passwords written on a piece of paper or captured in a spreadsheet, different password for every site but you can't remember them so waste time getting locked out of accounts, etc.)

A password manager is a life-changer.

Bitwarden even lets you share passwords. I'm an officer in a nonprofit and created a separate Bitwarden account for our nonprofit's passwords. Then I shared that account with my personal Bitwarden account, so I can stay logged in under my personal Bitwarden account and seamlessly access both my personal and nonprofit passwords.
Horologium
Posts: 25
Joined: Tue Oct 23, 2018 10:08 am
Location: Chicagoland

Re: Password manager

Post by Horologium »

Gadget wrote: Tue Jan 12, 2021 4:15 pm My recommendation is Bitwarden if you want to use a free one and don't need to share passwords with anyone.
A while ago there was an article re password managers on wirecutter (IIRC). In the comments, someone wondered why Bitwarden had been overlooked. I checked it out and have been a user ever since. It works flawlessly for me across a desktop, laptop, iPad, and iPhone.
Life Is Good
Posts: 51
Joined: Thu Sep 08, 2016 7:35 am

Re: Password manager

Post by Life Is Good »

Another vote for Bitwarden. I've been using it maybe 6-8 months. Works great across devices. Interface needs an upgrade, but the price is right.
User avatar
Gray
Posts: 798
Joined: Sat Apr 16, 2011 5:33 am
Location: Virginia

Re: Password manager

Post by Gray »

I’ve been using LastPass since 2012 with zero issues. I have a family plan for my family, and I’ve got them using it religiously now as well. I also have them using the LastPass Authenticator which is backed up to their vault.
User avatar
Tejfyy
Posts: 106
Joined: Mon Aug 26, 2019 9:18 pm

Re: Password manager

Post by Tejfyy »

I used Lastpass for some years, mostly as a premium user until last year. The renewal price had doubled I think, but more importantly I wanted to get off the cloud. So I'm using Strongbox, the free version. It's a local database. It's not as convenient as Lastpass was but I'm increasingly opting for simplicity, security and privacy over convenience.
Post Reply