One alternative is to go premium with Lastpass ($12 per annum) and get a YubikeyOne problem is that they offer four different Yubikey versions - and the comparison page is all double-ductch to me:
https://www.yubico.c...ts/yubikey-hardware/
So, interested in thoughts on Lastpass *and* also other options that might be safer to use than the free Lastpass.
-tomos
You can enable 2-factor even on Lastpass free. Use Microsoft or Google's authenticator and you're good to go. I have LP free while I'm evaluating it, and that's what I'm using.
-wraith808
I've been using the google Authenticator with Lastpass and I've noticed this flaw:
Say I'm trying to login to google: I click the little symbol in the name field and the Lastpass window pops up.
I fill in my Lastpass password and (in this browser at any rate) a new tab opens requesting the verification code.
But, meanwhile, in the google tab, the name/password fields have been filled:
I am able to login there, *without* having finished my Lastpass login, i.e. without having filled in the verification code.
That defeats the purpose. I'm wondering should I report to Lastpass, or is this a case of them really wanting us to go the paid route.
EDIT// that problem is in Iron browser (but not in PaleMoon) - can anyone confirm in Chrome?