Originally Posted by
HelloNNNewman LastPass did offer a very limited ‘free’ version (still do) when they switched to subscription-based model. For years I used their products on a couple different computers along with mobile phones and tablets to sync passwords. Their subscription model only allows you to use the service for free on 1 (one) device now. I switched over to Bitwarden and never looked back. Free service that syncs across an unlimited number of devices.
To your point directed towards Annie’s comment: A password management system can cut risk, but any solution introduces its own risks as I’m sure you are aware. A password manager is great for companies to help employees securely access sites with unique passwords, and lower FTE time spent on helping users with login issues - not to mention meeting any audit requirements. But depending on how large that company is, LastPass or any other that have a syncing function is not always a secure enough option. Because of attacks on password manager companies like this along with the surge of BitB attacks, our company, which employs several thousand across multiple countries, now blocks all password management services and only allows employees to use one application (KeePassXC) that encrypts passwords directly on that employee’s device. It additionally only auto-populates login forms when the URL of the form matches the details saved in the vault/database (along with utilizing MFA where available). One level of protection will never be truly secure, but these password services are huge targets and created a new risk target for companies - with even higher risk implications for those companies that deal with a large amount if PII data.
I am familiar with KeyPass and others and don't care to argue. Most people don't have the resources of a large IT department, and a lot of things people do require some compatibility and ease that make KeyPass more of a challenge.
Our outside audits have shown even with the possible weaknesses in a password manager system such as KeyPass alternatives the total of staff in and out of work have had fewer problems. Support for what I'll say something better than nothing.
With so many security issues the weakest link being human, training, and smarts, I'm sure managed/system type solutions will remain popular. You also bring up the important point of no one system. Most enterprises and lots of individuals pursue that too.
I won't deny the benefits or advantages for KeyPass, but above all poke people to not do a lot of common outdated ways to manage private and security.
