DonationCoder.com forum
 
Read-only archive. This is a static copy of the DonationCoder.com forum. Reading and searching work as before; logging in, posting and private messages do not.
Archive of 2026-10-21 · About this archive · Main site

Last post Author Topic: Newer password keepers/form-fillers - anyone using Dashlane or 1Password?  (Read 44,306 times)

Tuxman

  • OMG not him again!
  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 2,522
    • Participated in NANY Challenge Seven Times
Good comparison of password services with ranking:

http://www.asecurelife.com/dashlane-vs-lastpass-vs-1password-vs-roboform-vs-keepass/

Giving KeePass a bold "Contra" because you are not forced to store your passwords on other people's computers... LOL!
I bet when Cheetahs race and one of them cheats, the other one goes "Man, you're such a Cheetah!" and they laugh & eat a zebra or whatever.

rgdot

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 2,197
^ "other people's" is not accurate

Tuxman

  • OMG not him again!
  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 2,522
    • Participated in NANY Challenge Seven Times
The cloud basically are other people's computers.
I bet when Cheetahs race and one of them cheats, the other one goes "Man, you're such a Cheetah!" and they laugh & eat a zebra or whatever.

rgdot

  • Supporting Member
  • Joined in 2009
  • **
  • Posts: 2,197
Well yes, I meant syncing, over wifi for example. I don't see the point of using third party or cloud services to get something from one of my devices to another one of mine. In my case Dropbox may be an exception but it's the only one of that sort (files everywhere thing) I use and rarely at that.

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 9,827
    • Participated in NANY Challenge Eight Times
    • Cody Award
The cloud basically are other people's computers.

You're misrepresenting what they are saying.

Quote
Difficult to keep synced between devices

That says nothing about the cloud.

Tuxman

  • OMG not him again!
  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 2,522
    • Participated in NANY Challenge Seven Times
You're misrepresenting what they are saying.

From the LastPass "pros":

Quote
Share and send login information to other Lastpass users securely

--> No, I'm not. They give KeePass a worse ranking because it doesn't come with a built-in storage on other people's computers.
I bet when Cheetahs race and one of them cheats, the other one goes "Man, you're such a Cheetah!" and they laugh & eat a zebra or whatever.

Deozaan

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 9,827
    • Participated in NANY Challenge Eight Times
    • Cody Award
You're misrepresenting what they are saying.

From the LastPass "pros":

Quote
Share and send login information to other Lastpass users securely

--> No, I'm not. They give KeePass a worse ranking because it doesn't come with a built-in storage on other people's computers.

You're moving the goalposts. LastPass pros has nothing to do with KeePass cons. You specifically mentioned the bold KeePass contra:

Giving KeePass a bold "Contra" because you are not forced to store your passwords on other people's computers... LOL!

I quoted the only bold contra for KeePass, which is this:

Quote
Difficult to keep synced between devices

Again, that has nothing to do with the cloud, nor does it have anything to do with sharing passwords with other people. Nor does it have anything to do with LastPass.

Nice try though.

Tuxman

  • OMG not him again!
  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 2,522
    • Participated in NANY Challenge Seven Times
Again, that has nothing to do with the cloud, nor does it have anything to do with sharing passwords with other people. Nor does it have anything to do with LastPass.

Oh, so they compare the password managers without comparing their features vs. each other?
I bet when Cheetahs race and one of them cheats, the other one goes "Man, you're such a Cheetah!" and they laugh & eat a zebra or whatever.

wraith808

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 11,205
    • Participated in NANY Challenge Fourteen Times
    • Coding Snacks
    • Writer
    • Hardware Hacker
Again, that has nothing to do with the cloud, nor does it have anything to do with sharing passwords with other people. Nor does it have anything to do with LastPass.

Oh, so they compare the password managers without comparing their features vs. each other?

Correct.  You can make that determination based on your needs and wants.  I hate when reviews try to compare apples to oranges in terms of features.  Compare how they implemented (or didn't implement) what they implemented, and list those things clearly.  Let me draw the other conclusions when comparing software.  Else the review doesn't stand on it's own.

Innuendo

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 2,266
The Master Password as a way to access one's sticky account was addressed in the beta forum.

Someone complained:
Quote
This is UNACCEPTABLE. I do NOT want to use my Master Password to access my Sticky Account. No assurance you can offer is adequate. I want StickyPass, or a reg code that licenses my software.

Give the present direction, you force me to change my Master Password with every upgrade where I have to reach my account. I want no part of the cloud, and that includes Master Password in in form/hash/salt.

Their reply:
Quote
That's exactly what it does not. We never ever use MP as a string for hashing. MP is used only locally to prove that you can decrypt a random string used later as an access token. Basically it is the same situation as if you download a special DB encrypted by your MP, containing just a registration string to prove you can decrypt it.

f0dder

  • [Well, THAT escalated quickly!]
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
    • Participated in NANY Challenge Once
The Master Password as a way to access one's sticky account was addressed in the beta forum.
They do have some loading-animation thing when you sign into the forum, so I kinda guessed they might be doing something like this - it makes me a bit uneasy in closed-source software, especially when it's not a FAQ bullet mentioning the algorithm. OTOH, it can be safer than a password if implemented correctly.
- carpe noctem

f0dder

  • [Well, THAT escalated quickly!]
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 9,153
    • Participated in NANY Challenge Once
Redownloaded StickyPassword on OSX today, it's gone from StickYpassword_rev388.dmg to *_rev435.dmg - and now I was able to sign in to the existing account. Local WiFi sync works, and the BitDuJour discount was still in effect, so yeah, there we go.

The OSX version still needs a lot of polish compared to the Windows one, it doesn't have a top-bar icon like, say, 1Password, the preferences menu doesn't have a lot of options, there's no passphrase generator, and currently only Chrome and Safari addons.

Hm, it's storage format is SQLite, which is nice - it seems like only the entry data itself is encrypted, though, rather than a block-level encryption of the entire database.
[attachthumb=#]
- carpe noctem

Original address: https://www.donationcoder.com/forum/index.php?topic=41048.0