Hi everyone,

I just came across this project called LessPass, which doesn’t require a database as a back-end and can compute passwords on the fly instead of storing them. The idea really intrigued me, and I wanted to know from the community about the experience of using it - did you run into any troubles with it? How does it compare to more traditional password managers (which would need me to think of a back-up strategy)?

Is it possible to back up your passwords from LessPass? Can you use your own passwords when you prefer to? How are the client programs?

Thanks!

  • jeffhykin@lemm.ee
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    edit-2
    10 months ago

    Despite what others are saying, I’ve been using it for a couple years and it can work great.

    The key is to just use it as a sync system. E.g. avoid the risk of cloud storage, at the risk of having passwords stored locally. When I’m out, or using someone else’s device I can still always get my password. Even though they’re not in the cloud.

    When I’m on my personal machine, I just let the local autofill save them.

    There are a couple caveats.

    • I do agree there are a few sites where the default options don’t work because of the character restrictions. It’s about 1.2% of websites in my experience, but they are painful exceptions. Basically you have to rely on memory to be able to pick those same settings again. I recently wish there was a unified dataset of which websites had password requirements, and then LessPass would auto check the necessary boxes when the website URL was pasted in. Maybe one day.
    • The other caveat is you need to keep an offline copy of the lesspass webpage for worst-case scenarios. For the first time in two years their site was down for me a couple weeks ago. I had an offline copy so I was fine, but without it you’d be screwed.
      • jeffhykin@lemm.ee
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        10 months ago

        It avoids the need for cloud storage.

        If I’m out somewhere, with no device on me, I can still generate my passwords