Make sure you update Lastpass if using Chrome
Make sure you update Lastpass if using Chrome
Author
Discussion

jesusbuiltmycar

Original Poster:

5,137 posts

285 months

Corso Marche

1,906 posts

232 months

Tuesday 17th September 2019
quotequote all
The one thing I'm curious of is if it's browser entered passwords only why use LastPass over Google's password manager which is built into Chrome?
(Presuming people are signed into a Google account when using Chrome).

https://passwords.google.com/

Sixpackpert

5,350 posts

245 months

Tuesday 17th September 2019
quotequote all
Corso Marche said:
The one thing I'm curious of is if it's browser entered passwords only why use LastPass over Google's password manager which is built into Chrome?
(Presuming people are signed into a Google account when using Chrome).

https://passwords.google.com/
Because they me awkward like me and use Firefox on Windows PC at work and a Mac at home...

Corso Marche

1,906 posts

232 months

Tuesday 17th September 2019
quotequote all
Sixpackpert said:
Because they me awkward like me and use Firefox on Windows PC at work and a Mac at home...
Well that's a given. People using other browsers will use whatever options are convenient for them.

But Chrome is mentioned in the thread title.
I'm just curious as to why people who use Chrome and a connected Google account would use Lastpass over the in-built service from Google? As I said, it's just pure curiosity...


Mr Pointy

13,429 posts

190 months

Tuesday 17th September 2019
quotequote all
Corso Marche said:
Well that's a given. People using other browsers will use whatever options are convenient for them.

But Chrome is mentioned in the thread title.
I'm just curious as to why people who use Chrome and a connected Google account would use Lastpass over the in-built service from Google? As I said, it's just pure curiosity...
Lastpass is cross platform so it works on my Windows PC, my Android phone for several browsers. It also has other features such as document storage & can give access to a trusted person if you're incapacitated or dead. It's more than just a password manager. Chrome is mentioned because it's susceptible to this particular vulnerability.

Corso Marche

1,906 posts

232 months

Wednesday 18th September 2019
quotequote all
Mr Pointy said:
my Android phone for several browsers. /snip
Same use case as Sixpack above then. Multiple browsers.

I do have a second browser on both my laptop and phone (currently Brave), but seldom use it. Previously it was Ghostery browser.
BUT I don't log into any online service through any browser except Chrome. A conscious decision I made a few years ago. The more browsers you use the more risk increases, as browsers from smaller companies can sometimes lag with security updates and bug reports. One browser, connected through one account with 2FA, making use of the standard built-in password manager.
If a site looked wrong or failed to load or something or was riddled with trackers and adverts I might use Brave or similar, but I never enter sign-on credentials or passwords through it.

I've looked at Lastpass a few times in the past, but still can't resolve what it would offer me as a personal user, when I've already a baked-in password service in Chrome. The other add-on features don't seem to offer much beyond what you can configure yourself already with a small amount of dedicated time on a once-off first setup.
That's why I'm curious as to what value others get from it, hence the question. smile

(I'm not judging their enterprise products, as I presume they are a different offering with different use cases and requirements. That would be a different discussion. wink )

deckster

9,631 posts

286 months

Wednesday 18th September 2019
quotequote all
For me, it's the ability to store notes as well as passwords. Memorable answers, additional (non-website) passwords and user IDs, that kind of thing. Yes of course I could create encrypted files etc. for this stuff but it's just more convenient to have it all in one place and accessible over all my devices.

Mr Pointy

13,429 posts

190 months

Wednesday 18th September 2019
quotequote all
Corso Marche said:
Mr Pointy said:
my Android phone for several browsers. /snip
Same use case as Sixpack above then. Multiple browsers.

I do have a second browser on both my laptop and phone (currently Brave), but seldom use it. Previously it was Ghostery browser.
BUT I don't log into any online service through any browser except Chrome. A conscious decision I made a few years ago. The more browsers you use the more risk increases, as browsers from smaller companies can sometimes lag with security updates and bug reports. One browser, connected through one account with 2FA, making use of the standard built-in password manager.
If a site looked wrong or failed to load or something or was riddled with trackers and adverts I might use Brave or similar, but I never enter sign-on credentials or passwords through it.

I've looked at Lastpass a few times in the past, but still can't resolve what it would offer me as a personal user, when I've already a baked-in password service in Chrome. The other add-on features don't seem to offer much beyond what you can configure yourself already with a small amount of dedicated time on a once-off first setup.
That's why I'm curious as to what value others get from it, hence the question. smile

(I'm not judging their enterprise products, as I presume they are a different offering with different use cases and requirements. That would be a different discussion. wink )
I'm not sure where to start with all that really. The bane of web use is advertising & to persist in using a browser from an organisation whose sole focus is to ensure you & your activities can be tracked (to the extent of implementing steps to stop ad blockers working) & then claim it's more secure is just perverse. I don't think many intelligent people would class Firefox as a less secure browser, although Google would much prefer they disappeared.

If you die this afternoon, can your relatives gain access to all of your accounts? Maybe you are organised enough so they can, but you'd be in a tiny minority.

If your house caught fire & got pulled out of your bed by the fire brigade & left with nothing but your pyjamas could you get access to your building insurance, bank accounts, credit card account? I can access all the information I need from any internet connected devcie. All I need to remember is the Lastpass master passphrase. The people living in Grenfell Tower were in exactly this siutation.

Password managers aren't perfect but they are a significant step forward in online security.

Corso Marche

1,906 posts

232 months

Wednesday 18th September 2019
quotequote all
Mr Pointy said:
The bane of web use is advertising & to persist in using a browser from an organisation whose sole focus is to ensure you & your activities can be tracked (to the extent of implementing steps to stop ad blockers working) & then claim it's more secure is just perverse.
That's another topic entirely, which I doubt any of us have sufficient time to get involved in! It's done to death everywhere. The world has changed, we're all big boys, and enough of us realise how things are monetised nowadays. This is the world we live in. I protect what I need to when I need to, and what I deem appropriate on an ongoing basis.
The reality is that multiple profiles will exist online for me in this modern world without me having any device at all. A phone number, landline or mobile, is enough. Or even just a postal address.

To answer your questions quickly;

Mr Pointy said:
If you die this afternoon, can your relatives gain access to all of your accounts? Maybe you are organised enough so they can, but you'd be in a tiny minority.
Yes, quickly and easily. Accounts, Documents, Policies, etc etc
I'll accept we probably are in a minority.

Mr Pointy said:
If your house caught fire & got pulled out of your bed by the fire brigade & left with nothing but your pyjamas could you get access to your building insurance, bank accounts, credit card account?
Yes, undoubtedly. That's been ensured. If I walk out in my jocks so long as I'm conscious I'll be able to access the necessaries the following day.

Mr Pointy said:
Password managers aren't perfect but they are a significant step forward in online security.
Not disputing that at all. I am using one! Just inquisitive as to any pros of a competing offering.

For perspective, we've lived overseas for the last 7 years, and are now on country number 4 in that time. That concentrates the mind. If family at home can't access relevant information in case something happens to us then that's a nightmare scenario not worth entertaining, given the bureaucracy involved. It also means new bank accounts, immigration cards, visas, police checks, employment contracts, etc every couple of years. That all has to be readily accessible in an instant. And if we can't carry stuff out in a carry-on case aboard a plane then it stays behind. Hence the measures to ensure records of everything are available immediately to those authorised. There has already been two instances in those 7 years where a sudden exit occurred. The planning and prep paid off.