Hi everyone,

I just came across this project called LessPass, which doesn’t require a database as a back-end and can compute passwords on the fly instead of storing them. The idea really intrigued me, and I wanted to know from the community about the experience of using it - did you run into any troubles with it? How does it compare to more traditional password managers (which would need me to think of a back-up strategy)?

Is it possible to back up your passwords from LessPass? Can you use your own passwords when you prefer to? How are the client programs?

Thanks!

  • jeffhykin@lemm.ee
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    7 months ago

    #3 isn’t true. There’s a username field, so you just put in the username of the alt accounts.

    Your point about the master password and two factor is a good one though.

    In practice password restrictions are rare (like 1% of sites), but they are problematic when they happen because there’s so many different ways to restrict passwords and trying all combinations is impractical. Needing the counter is exceedingly rare. Remembering the username isn’t a problem, but if you don’t have a consistent policy of always-using-a-username or always-using-the-email (as the lesspass username) it can be difficult to remember that. Similar situation with the URL, if it’s not abbreviated consistently, then it’s a problem.

    That said, I still use LessPass for everything and just deal with the edgecase problems.