Main Area and Open Discussion > General Software Discussion

LastPass alternatives with two-factor authentication? (including premium LP)

(1/12) > >>

tomos:
Prompted by the breach at Lastpass (LastPass hacked), I'm looking for a safe alternative to the free version of Lastpass.
(I'm thinking mainly for desktop & Windows.)

One alternative is to go premium with Lastpass ($12 per annum) and get a Yubikey
Lastpass's summary of how Yubikey worksEnabling the YubiKey with LastPass

Once you have your YubiKey, enabling it with LastPass only takes a few steps:
Login to LastPass and open the LastPass Icon > My LastPass Vault > Settings > Multifactor Options tab.
Select the YubiKey option.
Insert the YubiKey device into a USB port on your computer.
Focus your cursor on the “YubiKey #1” field.
Press the button on the YubiKey device.
A long string of dots should appear in the YubiKey #1 field.
Change the “YubiKey Authentication” status to “Enabled”, and press the Update button.
Enter your LastPass master password and press Confirm.
YubiKey is now enabled for your LastPass account.

One problem is that they offer four different Yubikey versions - and the comparison page is all double-ductch to me:
https://www.yubico.com/products/yubikey-hardware/

So, interested in thoughts on Lastpass *and* also other options that might be safer to use than the free Lastpass.

Jibz:
2FA is the only way to make access to a cloud based password solution reasonably safe. You still have to trust them to store your data safely on their side.

The other option is to use a local solution. Some of those (1password, StickyPassword) can even sync over Wi-Fi only.

tomos:
Thanks Jibz

The other option is to use a local solution. Some of those (1password, StickyPassword) can even sync over Wi-Fi only.
-Jibz (June 16, 2015, 06:22 AM)
--- End quote ---

not sure what exactly you mean by "can even sync over Wi-Fi only". Is it that it can sync passwords stored locally with ones online?
[edit] I see it will sync the encrypted passwords between devices. IIUC this is what LastPass does as well - but I presume that each would store my master password in their databases. Where the two factor authentication comes in again I guess. [/edit]


I had done a search but managed to miss the recent Windows thread from rjbull ...
Newer password keepers/form-fillers - anyone using Dashlane or 1Password?
[edit] :-/ even more embarrassed to see I posted in it :-) [/edit]

wraith808:
Prompted by the breach at Lastpass (LastPass hacked), I'm looking for a safe alternative to the free version of Lastpass.
(I'm thinking mainly for desktop & Windows.)

One alternative is to go premium with Lastpass ($12 per annum) and get a YubikeyOne problem is that they offer four different Yubikey versions - and the comparison page is all double-ductch to me:
https://www.yubico.com/products/yubikey-hardware/

So, interested in thoughts on Lastpass *and* also other options that might be safer to use than the free Lastpass.
-tomos (June 16, 2015, 05:54 AM)
--- End quote ---

You can enable 2-factor even on Lastpass free.  Use Microsoft or Google's authenticator and you're good to go.  I have LP free while I'm evaluating it, and that's what I'm using.

tomos:
Thanks wraith, will check that out.

ah yeah, I'm working from desktop here:
there doesnt seem to be a version of Google's (or MS's) authenticator for windows - well not for Win.7 at any rate.
I came across recommendations for WinAuth (Windows Authenticator) - https://github.com/winauth/winauth
might try that out.
https://winauth.com/

Navigation

[0] Message Index

[#] Next page