LastPass hacked: how the competition is reacting

Incentives for some globally very heterogeneous migration resources… How are LastPass’ competitors positioning themselves after the latter’s hack?

Need to change your password manager after the LastPass hack? Major competitors are careful not to offer it…for the most part.

Doorman is an exception. In recent weeks, he’s ramped up the incentives in the form of blog posts. Starting December 5th with How to Delete Your LastPass Account. The 23rd came after “LastPass Hack: What You Need to Know”. Then, on the 27th, “How to identify passwords imported from LastPass to update.”

This series of publications is only one aspect of a particularly aggressive approach to competition. The “Keeper with” section at the bottom of the site’s home page is another symbol of this. LastPass tops the list, followed by Dashlane, 1Password, KeePass, and Bitwarden.

RoboForm also posted a “comparison” that started to date (January 2019). Its online documentation completes it with an article on “How to import from LastPass.” The process is described. RoboForm chose the LastPass browser extension as its vehicle. Noting that exporting is also possible through the web interface and desktop software.

in the house of Bitwarden, the documentation is more accurate. It provides the procedure for both the LastPass extension and the web version. And above all, an overview of the problems that may arise in case of failure. For example, creating a duplicate. Or the need to manually import certain items such as attachments, trash, and password history.

LastPass Enterprise: a potentially more difficult migration

Bitwarden offers special documentation for migrating from LastPass Enterprise. And that’s where things get a little more complicated. Especially for transferring shared folders. A maneuver that may require multiple exports or temporarily assigning all files to one user.

Support video, documentation 1 Password also solves the shared folders issue. Refer to LastPass support for end users who do not have all the necessary permissions.
It also discusses what happens to imported items. Among other things, we’re finding that certain LastPass log types, such as SSH keys and instant messaging accounts, fall into the “default” bucket of “secure logs.”

The principle of secure records is found here Dashlane. This, in particular, means that LastPass import is only available on the web and Android apps. As with Bitwarden, there is another section of documentation dedicated to paid versions.

Special procedures

in the house of Norton, no “duplicate files”, but a page that collects all supported sources for import. LastPass is listed along with Dashlane, 1Password, McAfee TrueKey and the Chrome-Firefox duo. A distinction is made between LastPass versions with or without binary components. The former can export CSV files. Second, it opens the data on a web page.

For the export part, Trend Micro it just redirects to the LastPass files. This includes, among other things, special procedures for Wi-Fi passwords, form elements, and identities identified at checkout.

to pass also integrated the video into their documentation. It only addresses the export option via the LastPass web version. The desktop software option is covered in a separate help page. Everything is accompanied by a “comparative” blog post from February 2021.

Keeper’s latest post contains a reference to a guide the publisher published last June. It provides an essentially automated migration procedure, ideal when end users migrate their passwords themselves.
Additionally, Keeper links to an article about “advanced cases”. In general, those that involve the intervention of administrators. They are recommended to go through the Keeper Commander command line tool. Paying attention to certain subtleties, especially correspondences between types of writing.

Main artwork © Rawpixel.com – Adobe Stock

Leave a Reply

Your email address will not be published. Required fields are marked *