google chrome saved passwords vs lastpass

And in all of those cases, LastPass did a notable job of disabling or patching these vulnerabilities. To be fair, some of these weren’t major just exploits that were discovered. Since 2011, LastPass has been involved in five data breaches or other security incidents-2011, 2015, 2016, 2017, and 2019. But it’s been years now and neither of those things have been done. Now, LastPass could fix both of these issues pretty easily by forcing 2FA and auto-locking the vault by default. (If you use LastPass and don’t want to switch, please enable this feature Account Options > Extensions Preferences > Log Out after this many minutes of inactivity.) Why isn’t this enabled by default? Both 1Password and LastPass lock the vault after a period of inactivity on mobile, but the same doesn’t apply to browser extensions. You know what else 1Password does that LastPass doesn’t? Auto-lock the vault in the Chrome extension by default. That’s a big level up on security for all your passwords. This key is also stored on your trusted devices, so it’s easy to keep secure but hard to lose.

The key is automatically generated and shared with you in a document when you sign up for 1Password. This is a highly complex key that is required every time you log in on a new device (note: only on the first log in-after the device is confirmed, you can log in with just your username and password).

First of all, it doesn’t just force 2FA out of the box, but it sets a “secret key” when you create your account. You should not have to opt in to better security, especially in a password manager.īut 1Password does things differently. You can change this behavior in LastPass’ extension settings, but it’s just baffling that auto-lock isn’t enabled by default. That’s a disaster just waiting to happen. At that point, anyone who has access to your computer also has access to your passwords. After that, as long as the computer stays online, you’ll never be asked to log in again. And if you install the Chrome extension, you only have to log in once.

Google chrome saved passwords vs lastpass