Slashdot Mirror
LogMeIn To Acquire LastPass For $125 Million (lastpass.com)
An anonymous reader writes: LogMeIn has agreed to acquire LastPass, the popular single-sign-on (SSO) and password management service. Under the terms of the transaction, LogMeIn will pay $110 million in cash upon close for all outstanding equity interests in LastPass, with up to an additional $15 million in cash payable in contingent payments which are expected to be paid to equity holders and key employees of LastPass upon the achievement of certain milestone and retention targets over the two-year period following the closing of the transaction.
The alternatives I hear most about seem to be 1Password and KeePass.
I use KeePass (http://keepass.info) or a compatible app and keep my data file synced in OwnCloud. Using Dropbox instead worked fine too.
Second keepass as I've used it for work for several years.
Copy around your own encrypted database. Don't entrust some damned service with your passwords.
There's several variations on this kind of thing. No subscription, and nobody else has your passwords.
It's also got a really nice feature where it can put your password into the paste buffer for only 10 seconds or so, and then it disappears.
Using a web-based service to track your passwords seems more dangerous than useful to me.
Lost at C:>. Found at C.
KeePass meets all 3 of those requirements.
Without you giving LastPass your master password and access to your two-factor authentication (you are using two-factor, right?), they couldn't tell you even one of your passwords if their lives depended on it.
Eagles may soar, but weasels don't get sucked into jet engines.
The Unix port is called KeePassX, and it works quite well under Linux, MacOS, the BSDs, etc.
Without you giving LastPass your master password and access to your two-factor authentication (you are using two-factor, right?), they couldn't tell you even one of your passwords if their lives depended on it.
So they claim, but since you're using black-box software provided by them to access your passwords that's a pretty specious claim. If the current binary that they provided to you doesn't harvest your access keys, the next one very well could (and most certainly would if their lives depended on it).
Marketing claims may provide some hint at utility, but they shouldn't be conflated with an actual measure of security.
If you want a vision of the future, imagine a youtube comments section scrolling - forever.