Critical bugs have been identified in the LastPass password manager, extensions for Chrome and Firefox. Critical bugs have been identified in the LastPass password manager, extensions for Chrome and Firefox Generating a complex password
About upcoming significant changes to the Firefox add-ons system. To ensure compatibility between browsers Firefox developers and other browsers have adopted a common API called WebExtensions. Supporting a common API will help reduce the cost of cross-platform development for companies like ours that have to produce and support extensions for multiple browsers. While switching to WebExtensions provides a number of benefits for developers, browsers, and users, we want to prepare LastPass users for the transition from the previous Firefox add-on to the new one.
We've been supporting two versions of LastPass for Firefox for over a year now. Stable version 3.x published in the store Firefox extensions, and version 4.x in development has been published on the LastPass.com website.
Although this created some confusion for LastPass users, we maintained the "legacy" version to maintain the Firefox-like user experience that our users preferred. In the meantime, we continued to develop version 4.x in accordance with the changes that Mozilla implements. But with the recent news that Mozilla will be moving entirely to WebExtensions by the end of 2017, we have to say goodbye to LastPass version 3.x for Firefox.
We will release the newest version of the add-on on March 31, 2017. The latest version of the add-on is expected to be rolled out to all users of version 3.3.2 within a few days after review by Mozilla. You can manually update the Firefox add-on now or wait automatic update in April. After this, only version 4.x will be available on both addons.mozilla.org and LastPass.com. For users of the Firefox add-on version 3.x, this update brings all the latest improvements we've made to the core logic and performance of LastPass, as well as latest interface user. Based on user feedback, we also recommend checking out the tile and list views in the 4.x interface to see which view is best for you.
LastPass 3.x Interface
LastPass 4.x Interface
In addition to implementing the changes made by Mozilla, we believe that the new version of our Firefox add-on is overall much easier to use. We know that change is not always pleasant. We're listening to your feedback and making thoughtful, informed changes while unifying the LastPass experience across all browsers and platforms.
Of course, the transition to new version The add-ons will not affect your LastPass account or any data in your storage. You will still have full access to your account at any time from any browser and from any device.
As always, you can contact our support team if you have any questions or concerns regarding this transition.
Meet LastPass, one of the... best programs for storing passwords, distributed as a single plugin installer for Internet Explorer, Google Chrome, Mozilla Firefox, Opera and Apple Safari, developed by LastPass. Passwords in LastPass are protected by a master password, stored locally, and can be synced with any other browser. LastPass also has a form filler that lets you automate entering passwords and filling out forms. The plugin supports generating passwords, sharing data, logging site logins, creating secure notes, and much more. Download LastPass possible below.
One master password (the motto on the site is “The last password you should remember!”).
Browser synchronization.
Generate strong passwords.
Password encryption.
Online form filler.
Import passwords from other password managers, as well as export.
Passwords are stored in cloud service lastpass.com in encrypted form (AES-256).
The LastPass master password is stored in your head and when you enter it, all passwords are decrypted from the database (AES-256).
Passwords are transmitted over a secure (https) connection.
LastPass creates a hash of your username and password, which is the key to the AES algorithm.
For authorization, the LastPass service uses a double hash; it is this hash that is sent to the server and is the verification key for authorization.
Names of groups, accounts and data are transmitted in encrypted form, https is used everywhere.
LastPass collects passwords that other password managers don't see, including many AJAX forms, and makes it easy to create strong passwords.
You will be able to import and export data from many well-known password storage systems (such as: RoboForm, 1Password, KeePass, Password Safe, MyPasswordSafe, Sxipper, TurboPasswords, Passpack, Firefox and Internet Explorer and many others). Passwords in LastPass are protected by a master password and stored locally and can be synced with any other browser.
LastPass uses strong cryptography on the client side - passwords leave the computer already encrypted, and only the user can decrypt them. And even if someone gets this data, the encrypted data is basically useless.
What I like most is that all data is stored on a computer and a secure service, periodically synchronized, and accessible from any computer with LastPass installed. In addition, it has a very convenient function for creating protected notes and other equally useful functions.
Almost everything. The program does everything itself. It will offer to save your login and password, enter them into the fields the next time you visit the page, or even log in to it yourself (if you want). At the same time, it generates passwords that you do not need to remember at all, and they will be different for each resource. This greatly increases the security of protected access.
If you want, your secrets can always be with you, no matter where you work and no matter what computer you use. To do this, you can use the local version (LastPass Pocket) for a flash drive (for this, it is advisable to first export your data from your LastPass account to a file on disk, so that you can open it later portable version anywhere, without installing the main program). Everything works without any restrictions on the amount of data saved, time of use, free and in Russian. Although there is a paid version, with slightly more advanced features, we are not talking about it.
The procedure for installing the program and registering a LastPass account is quite simple, you just need to agree with the default settings, and the installer will offer to disable password managers in installed browsers because of their unreliability. Creating a master password is also very simple (here you will be given options and shown how resistant your master password is to hacking). We also recommend that you change your Master Password periodically to prevent unauthorized access to your LastPass account. The LastPass service itself does not have access to your confidential data, which they honestly warn about. That is, if you forget or lose your master password, you will only be sent a password recovery prompt (and not your passwords, logins, etc.), or you will have to use account recovery.
The big advantage of LastPass, in my opinion, is that if you already have an existing LastPass account (and a learned master password, of course, to log into your account), you have absolutely nothing to fear from “falling” or reinstalling the system, you just need to reinstall it LastPass and log into your account, then the program will work for you. It goes without saying that all your passwords, websites, forums, secure notes, in general, everything that you saved will be restored on the new computer. The developers are not asleep, constantly updating LastPass, strengthening it (and your security) and improving the program, and updating in browsers LastPass extensions goes in background without interfering with work.
This is a description of the capabilities of LastPass, far from complete, I hope you like the program. In the end, I note that having tried many password managers, paid and free, I long ago decided on LastPass because of its simplicity and reliability. The program is updated quite often, both on the official website and services Google extensions, Firefox, Opera and Safari, there is detailed online help and videos on setting up and using the program.
Developer: Joe Siegrist
License: FreeWare
Language: Multi + Russian
Size: 59 MB
OS:Windows
Download:
The first and simplest option is the standard password manager of Chrome, Firefox, Opera or Vivaldi. Almost everything modern browsers are able to save and automatically insert logins and passwords into the required fields. Yes, this option cannot be called very functional, since it lacks some additional features like a reliable combination generator and secure notes. But you can use it completely free, and there is synchronization between various devices, which works, of course, only if you use the same browser everywhere.
Simplicity, accessibility, free. Synchronization between different devices.
− Low functionality and security.
1Password
1Password has been around for over eight years, but has always been overshadowed by LastPass due to its relatively high cost. It can store passwords, data bank cards, software licenses and other confidential information in a secure virtual storage. This storage can be located on a remote server or a local device. It is possible to synchronize via Wi-Fi, Apple iCloud or Dropbox. The developers paid special attention to security and encryption algorithms, thanks to which this service was not noticed in high-profile scandals.
Reliability, cross-platform, functionality, synchronization.
− High price.
KeepPass
If you are looking for a free solution and are not afraid of difficulties, then be sure to try KeePass. This is a completely open source project created by independent developers. It has a huge number of possibilities thanks to the presence of a whole arsenal of various add-ons, plugins and auxiliary utilities. However, in return you will have to come to terms with the typical disadvantages of free software in the form of high complexity of development and instability of some elements.
The password database created in KeePass is stored in the form of a single file, which can be placed on your hard drive or in some cloud service. In the latter case, you can implement data synchronization between different devices. There are plugins for popular browsers that, with varying degrees of success, provide substitution of logins and passwords for the right pages. In addition, KeePass is also available on mobile devices.
Free, functional, secure.
− A solution for geeks who can select and correctly configure all the necessary components.
Dashlane
This password storage service appeared relatively recently, but has already managed to prove itself on the positive side. Dashlane has a pleasant appearance, good functionality and ease of use. The password database is stored in the cloud in encrypted form, and there is synchronization between clients for different platforms (Mac, PC, iOS and Android). Among additional features It is necessary to highlight the function of automatically filling out forms, a password generator, the ability to change passwords in one click and convenient tools for online shopping. But all this splendor may fade for you if you want to use data synchronization between different devices. To do this, you will have to buy an annual subscription costing $39.99, which, you see, is quite a lot.
Appearance, reliability, cross-platform, digital wallet.
− High cost, lack of local password storage.
Which password manager will you choose if LastPass does become paid?
For a long time I used the Roboform program to store my passwords for sites and fill out web forms for registration on various sites (I was happy with everything about it, except that it was paid).
But somehow I got tired of constantly having to reinstall operating system, save the folder first the specified program, which is responsible for storing information with logins and passwords for my sites.
Then, after reinstallation, look for a new version again and carry out manipulations with replacing files and folders. And then the unexpected happened: after the operating system failed, I lost access to all data.
Data recovery specialist with hard drive I don’t consider myself, so I didn’t restore anything, but set myself 2 tasks: 1 - find a free and reliable password manager; 2- have access to all your passwords and logins from any place where there is an Internet connection.
While searching for an alternative password manager, I found an add-on for browsers (Firefox, Google Chrome, Opera) called LastPass Password Manager with all the functions that I need (remembering logins and passwords, filling out web forms, a password generator) and I don’t have to pay for these functions.
Plus, the data is stored in encrypted form, to which only you have access. The addition has shown excellent performance for more than six months. Let's do the installation using the Firefox Internet browser as an example.
After installation, restart the browser by clicking the “Restart now” link.
The browser is restarted and a window appears with the beginning of the LastPass setup procedure, where the first thing we need is to select a language and click the “Create an account” button.
In the next window, enter a valid address Email, the most important master password (you must remember it or write it down somewhere if you suffer from forgetfulness. We will need it to gain access to all our passwords and the manager’s control panel.
Create a password reminder (optional), and be sure to check the box “I have read and agree to the Terms of Use.” Next, check the box “I understand that my encrypted data will be sent to LastPass.” Select the remaining items as desired and click on “Create an account.”
We read extremely important information, enter your main master password again and click “Create an account.”
We import or not (optional) our logins and passwords from other storages of confidential information on the computer and click on the “Continue” button.
You can immediately set up information for filling out web forms.
At the last step, we accept Congratulations on the successful installation and click on the “Continue” button.
PASSWORD MANAGER
We are automatically taken to the online storage of your account.
A branded manager button with the functions we need appears in the right corner of the browser.
To make using a password manager as convenient as possible, I would recommend going to settings and unchecking the “Use compact toolbar” checkbox.
We will have a convenient control panel on top of the entire line in the browser. Now, when you enter your username and password on any website, LastPass will prompt you to save the information.
Now you can access any website you need using the website name dropdown in the manager's top control panel.
A convenient feature is to import all logins and passwords from various popular managers.
Worth mentioning is the highly customizable password generator.
Now, after reinstalling the operating system, be it Windows or Linux, you just need to install the LastPass Password Manager add-on and all your confidential data is back with you.
In conclusion, I will say that in Google browser Chrome, its version for some reason has fewer settings (in particular, I did not find how to disable the compact toolbar to display the manager in the entire browser line). I will also mention that this password manager has not been tested in Opere.
