Lastpass problems
Discussion
Exec Summary: if you are using a password manager make sure you have up set all recovery methods available & keep an offline list of all of your passwords.
Having suggested Lastpass whenever the issue of password managers has arisen I've had problems over the last couple of days which have lead me to reconsider.
It started out with my PC not being recognised as a Trusted Computer when used with Firefox requiring me to use by Yubikey everytime Firefox was opened. Online research led to suggestions of deleting the FF addon & reinstalling, which I did. This turned out to be a bad move as on trying to login it failed every time. I was pretty sure the password I was using was correct as it's also stored in an offline text file. Nothing I could do made any difference: I tried from my PC, my laptop & my phone without success.
While annoyed I wasn't too concerned as I had set up the SMS reset facility, so I triggered it only to get an error message "our carrier cannot currently sent SMS messages to your country". I tried a couple of times & left it until the next day, with the same result. Now I was stuck. I sent a message to support & luckily they recognised me as a Premium member so I was actually going to get an answer. Sadly it was of no use, simply telling me they couldn't reset my password & giving links to the web pages about recovery & setting up a new account (ie starting again). I pushed back on this & today I actually got an SMS reset code. It didn't work. It's supposed to reset your password & let you in to your account, prompting you to change your password. Instead it prompted for a OTP which is another reset mechanism I hadn't set up. I pinged this back to support & am waiting for a response.
Grasping at straws I then set up Lastpass on Chrome & bingo, I was in. I've no idea what the issue was but I can now login OK.
So the moral of the story is I strongly recommend you set up both SMS & OTP recovery mechanisms & make sure you have all of your passwords written down in a file somewhere safe. I was on the point of having to start again with a new account. I'd also suggest paying to be a Premium member if you envisage wanting any support. I'm still not sure if Lastpass is flakey on Firefox as I'm getting "check your internet connection" messages when logging in but I haven't had time to look at that yet.
Having suggested Lastpass whenever the issue of password managers has arisen I've had problems over the last couple of days which have lead me to reconsider.
It started out with my PC not being recognised as a Trusted Computer when used with Firefox requiring me to use by Yubikey everytime Firefox was opened. Online research led to suggestions of deleting the FF addon & reinstalling, which I did. This turned out to be a bad move as on trying to login it failed every time. I was pretty sure the password I was using was correct as it's also stored in an offline text file. Nothing I could do made any difference: I tried from my PC, my laptop & my phone without success.
While annoyed I wasn't too concerned as I had set up the SMS reset facility, so I triggered it only to get an error message "our carrier cannot currently sent SMS messages to your country". I tried a couple of times & left it until the next day, with the same result. Now I was stuck. I sent a message to support & luckily they recognised me as a Premium member so I was actually going to get an answer. Sadly it was of no use, simply telling me they couldn't reset my password & giving links to the web pages about recovery & setting up a new account (ie starting again). I pushed back on this & today I actually got an SMS reset code. It didn't work. It's supposed to reset your password & let you in to your account, prompting you to change your password. Instead it prompted for a OTP which is another reset mechanism I hadn't set up. I pinged this back to support & am waiting for a response.
Grasping at straws I then set up Lastpass on Chrome & bingo, I was in. I've no idea what the issue was but I can now login OK.
So the moral of the story is I strongly recommend you set up both SMS & OTP recovery mechanisms & make sure you have all of your passwords written down in a file somewhere safe. I was on the point of having to start again with a new account. I'd also suggest paying to be a Premium member if you envisage wanting any support. I'm still not sure if Lastpass is flakey on Firefox as I'm getting "check your internet connection" messages when logging in but I haven't had time to look at that yet.
SMS reset doesn't sound secure to me. Isn't the whole point of LastPass that only you have the password and there is no back door?
I too have a Yubikey and keep an offline copy on an encrypted USB stick should the worst happen.
Since they doubled the subscription price again (typical LogMeIn ownership) I think I'll jump ship when my renewal comes up. I've been a LastPass user for years but instead of following KISS and just concentrating on being reliable they have gone down the route of adding pointless features and are trying to use that as justification for the price rises. Its just a shame KeePass doesn't have official sync and iOS support - I won't trust a 3rd party with the keys to my kingdom.
I too have a Yubikey and keep an offline copy on an encrypted USB stick should the worst happen.
Since they doubled the subscription price again (typical LogMeIn ownership) I think I'll jump ship when my renewal comes up. I've been a LastPass user for years but instead of following KISS and just concentrating on being reliable they have gone down the route of adding pointless features and are trying to use that as justification for the price rises. Its just a shame KeePass doesn't have official sync and iOS support - I won't trust a 3rd party with the keys to my kingdom.
colin79666 said:
Since they doubled the subscription price again (typical LogMeIn ownership) I think I'll jump ship when my renewal comes up. I've been a LastPass user for years but instead of following KISS and just concentrating on being reliable they have gone down the route of adding pointless features and are trying to use that as justification for the price rises. Its just a shame KeePass doesn't have official sync and iOS support - I won't trust a 3rd party with the keys to my kingdom.
Yep, tosspots, I've already sacked my subscription off and use the free version now. silentbrown said:
Rather worrying: "our carrier cannot currently sent SMS messages to your country"
Are you in UK at present?
Yes. I got reset codes when I tried it two days later but I don't think it worked as it should. I believe it should reset your PW to the code, log you in & then immediately make you change your pasword. It failed every time with messages about not finding a OTP - which is a different reset mechanism I hadn't set up.Are you in UK at present?
davek_964 said:
Hmm, this is making me think I should have a copy of my passwords somewhere. Although if I've got that, I don't really need to use a password manager....
I strongly suggest you do have a copy; I keep it on a USB key. I think using a manager is much more convenient due to the autofilling & suport across both PC & my phone but I'm now very wary of the reset mechanisms offered. It's obviously a diffcult topic as they don't want to allow the wrong person to access an account & I'm glad there is a way to reset the password but it needs to work. Mr Pointy said:
davek_964 said:
Hmm, this is making me think I should have a copy of my passwords somewhere. Although if I've got that, I don't really need to use a password manager....
I strongly suggest you do have a copy; I keep it on a USB key. I think using a manager is much more convenient due to the autofilling & suport across both PC & my phone but I'm now very wary of the reset mechanisms offered. It's obviously a diffcult topic as they don't want to allow the wrong person to access an account & I'm glad there is a way to reset the password but it needs to work. Gassing Station | Computers, Gadgets & Stuff | Top of Page | What's New | My Stuff