At least it's just salesforce data and not actual vaults and secrets.
I moved away from these guys a long, long time ago when they started upping subscription costs.
At least it's just salesforce data and not actual vaults and secrets.
I moved away from these guys a long, long time ago when they started upping subscription costs.
I selfhost Vaultwarden on my server. I use the Bitwarden client to access my passwords.
I heard thr saying, "LastPass is the Last Password manager you should ever use". That was like, what, three breaches ago?
lastpass is already on my 'stay far away from' list, and have been on it for years:
The Klue supply chain attack was claimed by the Icarus extortion group, who compromised the infrastructure of the AI-powered market intelligence platform and stole OAuth tokens that connected customers' Salesforce environments.
At least someone is finding good use for AI lol
Haven't used Lastpass since the logmein deal rubbed me the wrong way, went to dashlane for many years but they had some security scares just recently. now I self host Vaultwarden, which is a bitwarden compatable server.
for maximum security I could have it local only and connect to it via VPN directly, but I put it behind nginx, with SSL, fail2ban with only my IPs whitelisted and a geofilter on top of that. so even if someone did manage to make it to the login page of the admin panel, they'd need a 30 digit passphrase and an email address username that only exists for that one application, get it wrong once and you are blacklisted.
Thats not so bad. I swear sales is always a magnet for this shit. They constantly insist on integration with the most dogshit slop products.
Left for BitWarden after the first major breach. Sad. Such a good start back in the day.
A separate mention should be made of PearPass. It is a new password manager, direct synchronization between devices without central cloud storage, store data locally on your devices and apps for major platforms.
PearPass as an interesting new option worth keeping an eye on.
all 24 comments