Jsharp5680 t1_j86znhp wrote on February 12, 2023 at 2:41 AM

Reply to comment by williamogle in Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

Look at Vaultwarden (Bitwarden written in rust). I've been self hosting for almost 3 years. It's the bees knees!

Jsharp5680 t1_j86z0cl wrote on February 12, 2023 at 2:36 AM

Reply to Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

Fuck these mother fucking pieces of shit and the horse they rode in on.

That's how I feel about LastPass. Fucking absolute failure at the one thing they were supposed to get right.

Sad irony about this... I stopped using LP for my family about 2.5 years ago and migrated to a self hosted Bitwarden instance. I kept my free LP account as a "just in case" something goes wrong with self-hosting.

Fast forward to now. Self-hosting Bitwarden has been simplistic, easy to secure and 100% reliable.

Now I'm finding myself going through all of my more sensitive secrets in LP, rotating encryption keys I backed up there, passwords and the like. Major pain in the ass (some of the services used / encryption keys require a full reset and reconfigure - things like off site backups - so, resetting and reconfiguring backup jobs).

Then I have to go take care of my wife's secrets (less sensitive things).

But yeah, for the less technical savvy folks using LP, much more of a nightmare.