

If I was doing it again I would evaluate the ease of use of bitwarden again, though.
#Bitwarden vs 1password vs lastpass password#
If you combine your password manager with your OTP app, then you are only using "a thing you have". Both the password and the name are both "a thing you know". It is a little like using your mother's madian name, or your first pet's name as a MFA. I'm just saying: Don't put all your eggs in one basket. But until this year I also would have said it was unlikely that lastpass would leak every Custer's encrypted data, and be shown to have been not using best practices for encryption. If the bad guys get into one of those accounts, they then have access to both the password and the MFA that goes with it. But that is not the point right now.) Now imagine that these same bitwarden and 1password accounts use the bitwarden or 1password built in replacement for Google authenticator? They both have that.

(Kinda less as most mfa is sms, and most also have ways to defeat the MFA. However, if all the passwords in those accounts require MFA, then all is still good. So while bitwarden and 1password are not in this problem today, they might be someday. The yubikey only helped guard the front door. The only thing between the bad guys and every password is the cryptography and the strength of the lastpass password. What it did not do is help with the mass data leak they had. I just am not expressing myself well.įor lastpass customers, the use of a yubikey may have kept their personal lastpass account safe from people trying to log in with a guessed password. I tend to lean toward FOSS so I tried Bitwarden as my first LP replacement and came to an immediate stop there.īitwarden + yubikey is tight. Lots of my friends love 1P and it may be the case that it does all these things as well. I suspect this is a Chrome limitation but dammit, I want it to save my "drafts" :) You have to pop out the tool into its own window if you want to keep it open and switch back & forth.
#Bitwarden vs 1password vs lastpass software#
