- by The Walking Wards, 2 years agoRated 3 out of 5LastPass is a great password manager. It's very handy tool to save and manage my passwords. Very cool features, to me the major downside is it's big performance impact. Ever since I've been using it, I've seen my YouTube videos stuttering at times when it's playing, having trouble playing HD video content, timeline scrubbing is very problematic, and it's even not stuck only to playing Video Content. When I'm using Facebook/Messenger, the website becomes very sluggish, reaction selectors, or even the option to edit the background of a text only post is very delayed (and no my Internet is not the problem). If LastPass makes an update that improves its performance, I would reconsider re-enabling it.
- by Firefox user 13579924, 2 years agoRated 3 out of 5Cuando se elige "Copia la contraseña", solicita la contraseña maestra. Al introducirla, no se produce la copia, sino que hay que pulsar de nuevo el botón. Esto hace que, si no se elige la opción "Recordar por [tiempo]", no se pueda copiar la contraseña.
- by Firefox user 14712614, 2 years agoRated 3 out of 5Why does FIREFOX keep on disabling LASTPASS Password Manager every so often. It doesn't make sense unless they are doing it so people switch to another password manager. Getting tired of FIREFOX
- by Firefox user 14693259, 2 years agoRated 3 out of 5Many times, it cannot save new vault. From both auto-recognized popup and moz-extension page. Chrome extension works great but FireFox one does not.
- by Firefox user 15257381, 2 years agoRated 3 out of 5Gets very confused at times. Worst problems occur when you have more than one login on a site, for example, logins for various family members. May choose a password from your "database" that is unrelated to the site, when the same email login is used on another site and it gets confused. Poor resolution of demonstrated problems. Known security breaches occurred, but users were not informed in a timely fashion. Otherwise, pretty good.
- by Firefox user 15238324, 2 years agoRated 3 out of 5UPDATE. DO NOT USE YUBIKEY FOR TWO FACTOR AUTHENTICATION - UNFORTUNATELY LASTPASS DOES NOT USE FIDO2 AS THE AUTHENTICATION MECHANISM AND INSTEAD USES THE YUBIKEY PSEUDORANDOM KEY GENERATOR THAT BECAUSE OF POOR IMPLEMENTATION BY LASTPASS MEANS IT REMAINS SUSEPTIBLE TO ATTACK AND LEAVES YOUR ENTIRE VAULT OPEN TO THIEVES. THIS IS A KNOWN SECURITY ISSUE AND IRONICALLY ONLY APPLIES TO PAYING CUSTOMERS. SINCE LASTPASS HAVE BEEN INFORMED OF THIS ISSUE, NO ATTEMPT TO RESOLVE THE PROBLEM HAS BEEN MADE. THIS TOGETHER WITH A LACK OF TRANSPARENCY IN THEIR ISSUE MANAGEMENT RATES THIS AS 3 STARS AT BEST. THE remainder of the review relates to usability and is based on Lastpass's own publicity which given some of their representations at the time of this review regarding Yubikey being false, should be taken with that fact in mind.
Lastpass is probably one of the more intuitive password managers on the market at the time of writing with integration into the widest number of websites and available on the widest number of platforms of all the consumer focussed password / identity management solutions. Security applications have for the most part been devoid of interfaces that make it simple for the end-user to use, or for the most part even understand, so in many ways LastPass's user interface is the main reason for its awards and subsequent user base. Functionally the range of features that come with Lastpass are impressive, if a little daunting for someone who has not seen its evolution as a piece of software and it can feel as though if you used all the features and functionality it contains – it can be used to keep secure notes and has multiple templates for recording other types of sensitive data besides passwords for websites – then you would be relying on a basket that would be holding a lot of heavy eggs. Templates include SSNs, WiFi Passwords, Bank accounts, payment cards, Insurance Details etc. and has the funtionality for creating your own templates (I created one for storing GPG Keys and another phone IMEIs among other things), that it really can feel that you could be left very exposed to identity theft if an exploitable security hole went unpatched. There is, as with all password managers, an issue that is core to single password information vaults. Your LastPass password may the the last password you'll ever need but it's also the only password you must never ever forget. Or divulge. And it needs to be good enough that it's not easily guessable. For all these reasons I believe it's critical that some form of two factor authentication is used in addition to a strong password. The second authenticator can be hardware, e.g. software like Google Authenticator which generates a pseudo-random number generator app creates a new 6 digit authorisation code every 30 seconds. (Lastpass offer their own app for generating these numbers). It's why we all should have at least two front door keys (and not keep one under the flowerpot!) However the Achilles heel that all Vault based security apps struggle with: To ensure that only you can access your data also means that as there is no means of opening the vault if you forget your LastPass password, or lose the only source of authenticating you as the authorised user. LastPass have attempted to resolve this problem with a form of escrow that grants user nominated individuals access to the Vault in the event that the primary user is unable to input their password. I understand it is there primarily to help the family in circumstances where they need to take over management of the user's affairs. but the solution has a "tacked on" feel to it. Lastpass has made a strong commitment to ensuring their offering is secure which can be found on their website. Of all the password managers on the market I have found it to be the best and rate it highly, recommending it frequently. That said there are parts of the functionality which novice users and those who aren't IT literate do find it frustrating to use. I do think perseverence in learning is rewarded - there are substantial set of FAQs, active user forums, instructional videos, user support and guides which can be easily accessed. Overall a very useful and powerful extension which provides a huge amount of tools to make your online life far more secure.
- by Firefox user 15235946, 2 years agoRated 3 out of 5I have been a long time user and generally happy with the password functionality and convenience. In the last bunch of months, updates are failing for me on this FF add-on. It prompts for an update, I click it to install and it hangs. If I completely uninstall and reinstall, the new version would take, but when I am doing that now, I am still getting prompted to update. Must be version for download wasn't updated yet? Anyway, I am growing tired of this and will either ditch FF or ditch LastPass (or both) if this does not sort out.
- by Firefox user 15233092, 2 years agoRated 3 out of 5Does what I need, but a) why do I have to reinstall it every time my Firefox updates, and b) ongoing bug forces me to re-insert my master pw when using certain entries.
- by Newrone, 2 years agoRated 3 out of 5EDIT3: v.126.96.36.199 has now gone haywire again! Do some proper testing, guys, or just leave it alone when it's working!
Back to 3* for now.
EDIT2: v. 188.8.131.52 seems to be working! Moving up to 4 stars & will review this if it is maintained over time.
EDIT: I GOT IT WORKING! But only by installing the PREVIOUS version. So moving up to 3 stars for now.
I've used this for over 2 years, found it very useful & gave it 5 stars. Now it's broken: password not recognised, plugin considered "not installed" when it is, no solution from Support & no way even to delete my account! Report sent to Mozilla.