• PotatoesFall@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    11
    ·
    3 months ago

    I heard thr saying, “LastPass is the Last Password manager you should ever use”. That was like, what, three breaches ago?

  • Faceman🇦🇺@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    9
    ·
    3 months ago

    Haven’t used Lastpass since the logmein deal rubbed me the wrong way, went to dashlane for many years but they had some security scares just recently. now I self host Vaultwarden, which is a bitwarden compatable server.

    for maximum security I could have it local only and connect to it via VPN directly, but I put it behind nginx, with SSL, fail2ban with only my IPs whitelisted and a geofilter on top of that. so even if someone did manage to make it to the login page of the admin panel, they’d need a 30 digit passphrase and an email address username that only exists for that one application, get it wrong once and you are blacklisted.