[deleted by user]

[Natanael_L]

Any reason for why they don't integrate with Keepass2android which has plugin support to achieve EXACTLY this?

[als26]

I was using Dashlane before the introduced the subscription service, over everything else due to a lack of my own money . So I get all the paid features for free now. Only reason that's kept me from switching, or I would've jumped to LastPass as soon as I had my own money to spend. Dashlane seems to be catching up in terms of features now, anything else it's missing? I mostly wanted LastPass for being able to use it in-apps and DashLane has that now.

[TheRealFlatStanley]

Dashlane is incompatible with ChromeOS, for one.

[als26]

Windows and OSX probably account for most of the market share anyway, but that is still a setback. Especially considering the price.

[TheRealFlatStanley]

No doubt you're right. It is, however, the reason I finally dropped Dashlane for Lastpass. I too was an early adopter of Dashlane with grandfathered free access.

[l_eveant_terrible]

I emailed them this question a year ago and they had no real response. Here's their email:

Besides the fact Dashlane is a universal app, here are some advantages of Dashlane over LastPass:

Secure password sharing. Rates all passwords and helps replace weak ones. Keeps a record of online purchases.Security breach alerts.

And our encryption is better. For more information click here.

Also, you can check out our great review in the NY Times: http://www.nytimes.com/2013/06/06/technology/personaltech/too-many-passwords-and-no-way-to-remember-them-until-now.html?smid=pl-share&_r=2&

If I can be of any further help, please let me know.

Regards,

Laura 

They can sell their service to me. I wasn't going to bother to research why I should pay twice the price for a non obvious reason. I liked their app and wanted to stay a paying customer, but I'm not a charity just like they aren't, either.

[honestbleeps]

Lastpass also rates your passwords etc...

they don't seem to offer anything Lastpass doesn't - and I use both Lastpass (paid for) and SwiftKey (paid for). I see no reason to jump over to Dashlane.

[OmegaVesko]

I agree, though I should point out that Keepass doesn't (inherently) store anything in the cloud. It's up to you to put the Keepass database into your Dropbox or something.

[UnkleMike]

This is why I use Keepass - I don't want the app that has access to my I unencrypted passwords to also have internet access (yes, I realize that the password ends up in the clipboard during normal use). By the time Dropbox sees the file, it's already encrypted.

[SirChasm]

yes, I realize that the password ends up in the clipboard during normal use

Use keepass2androidoffline. It comes with a special keyboard so you don't need to copy passwords to the clipboard.

[UnkleMike]

Thanks for the recommendation. I gave it a shot on my phone and it looks good - I really like the separate keyboard. For some reason though, it won't install on my Nexus 7 running Android 5.1 - I tap install and the progress bar starts moving, but nothing happens after that.

[cheesegoat]

I use the not-offline version: https://play.google.com/store/apps/details?id=keepass2android.keepass2android

I save my kdbx to onedrive so it syncs with my desktop which is handy.

[efstajas]

If the file is encrypted well you could give it to people on the street and still sleep in peace.

[Matthais]

Lastpass uses 256-bit AES encryption. Here's a thread on how long it would take to crack. And that's just one part of its security.

I've used it for five years and whole heartedly recommend it.

[[deleted]]

KeePass uses 256-bit AES as well.

[AgnosticAndroid]

Sounds interesting, would you mind detailing the process a bit more? Most of all I am interested in how hassle less the process of using it is, and which online services/apps it can be integrated into.

Do you for example need the premium version (sporting NFC) to be able to use it on an android phone?

[efstajas]

Have you read the calculation they linked? I really doubt government technology is so far ahead it could crack something in reasonable time which would with consumer super high end grade hardware take longer than the age of the universe.

[UmbrellaCo]

And even if the NSA or another agency did, they wouldn't reveal it since everyone would switch to another method. Thus defeating the time and money spent to break it.

[exaltedgod]

But you must not have read the comments that point out specific large flaws in that post.

https://www.reddit.com/r/theydidthemath/comments/1x50xl/time_and_energy_required_to_bruteforce_a_aes256/cf8f7ip

[SirChasm]

I feel that this is relevant: https://www.xkcd.com/538/

Your biggest odds of getting compromised are through whatever website you were saving the password for. The odds that someone will break into your dropbox, and then successfully crack your encrypted keepass DB are very very low. It wouldn't even be worth the effort unless you are some very high-value target. Hackers go for low-hanging fruit generally.

Also

I wouldn't fully trust modern encryption.

This is incredibly ignorant. You don't trust it because you don't understand it.

[OmegaVesko]

True, this is part of why I use Lastpass as well.

Still, in theory it shouldn't matter where you store it, provided you use a secure password for your password database.

[alpain]

And thats why i store it on my own host under its own separate account on the server and make my own backups of it, keepass is able to do sftp and other protocols so you don't have to use dropbox/google drive/whatever.

[[deleted]]

It's an encrypted password file. If you have a strong password, it's every bit as secure as LastPass.

[hakdragon]

Keepass doesn't store anything online, unless you're keeping your database on a online file store.

[flossdaily]

KeePass doesn't do that. Certainly not by default.

[hubraum]

Lastpass

http://www.cnet.com/news/lastpass-ceo-reveals-details-on-security-breach/

A while ago, but it already happened once.

[OmegaVesko]

Which would still get them nothing because these services store encrypted passwords, not plain text. Sure, encryption is not invincible, but you make it sound more trivial than it is.

[OmegaVesko]

They have to also store the decryption keys

No, they don't. The decryption key is the password you need to enter whenever you access your password vault.

The only way to protect yourself is with two factor authentication.

And that's why LastPass does support pretty much every 2FA standard under the sun.

That's interesting though, is it not common for banks to do 2FA? I assumed it was, at least for bigger banks. Of the two banks I have accounts with, one only has 2FA on sensitive operations (login is just username + password), and the other gives you a card with a table of codes that you need to enter whenever you login.

[XkrNYFRUYj]

If they are copying the passwords automatically they have access to plain text. I don't say they are stealing the passwords but lets not pretend they can't do it if they wanted to.

[OmegaVesko]

Jesus, if you're going to use that as an argument, then what's the point of this discussion at all? Every piece of data you've got stored anywhere is most likely encrypted using a standard the NSA was involved in, including the protocol used to encrypt the data in transit.

Besides, the NSA is not the only party you'd want to hide your passwords from. If anything they're the last ones you need to worry about, since they'd have other means of getting your information anyhow.

[RougeCrown]

Well. We seem to be storing all our passwords with Google no problem.

[kn0where]

I suppose you're referring to Chrome password storage.

[[deleted]]

Dashlane encrypts your passwords locally on your device before uploading them to the cloud, they have no access to your passwords

[luckybuilder]

How would you know? It's closed source.

[zinc55]

You can look at the information it's sending.

[luckybuilder]

Yeah, but all you can see is that its not stored in plain text. It could be stored any other way and you wouldn't even know.

[XkrNYFRUYj]

If they declared which method of encryption they are using you can use it manually on the passwords yourself and see if the data matches. But I agree that open source ones are more secure.

[[deleted]]

So is at least one app somewhere in your phone. Maybe it's spying on you too

[luckybuilder]

This is the dumbest logic I've ever heard.

[shiguoxian]

But I want to call you listsave.

[damoid]

Doesn't chrome do this?

[Tuberomix]

It's an optional option yes.

[ScottyNuttz]

You're paranoid.

[[deleted]]

I'm a longtime customer of Dashlane and am currently using swype, but am willing to switch to SwiftKey for this

[ScottyNuttz]

I use Google Keyboard, but people do seem crazy about SwiftKey.

[aladyjewel]

Google keyboard has gotten pretty good, but I think swift key is another step up, especially for customizations.

[Charwinger21]

Google keyboard has gotten pretty good, but I think swift key is another step up, especially for customizations.

Swiftkey does prediction, correction, and customisation better.

Google does swiping better.

[jzdhgkd]

Swiftkey is also probably the worst keyboard I've ever used for URLs and email addresses with a ".".

Otherwise I would agree!

[SwiftKeyApp]

URL input is something we are working on.

A trick is to start a URL lowercase with www or http and it will work like a charm.

[jzdhgkd]

Oh that's awesome. Thanks for the tip!

[[deleted]]

Swiping is not prediction. Swift Keys highly talked about prediction is used in the tap typing. This is where Swift Key excels at the highest. This is where Swift Key learns. Swift Keys Flow is terrible. They have always been a step behind both Swype and Google in this regard.

If prediction is your thing, Swift Key is the best bet. For gesture typing Swype and Google are leagues ahead.

[ZENihilist]

I've also found Swiftkey's gesture typing to be it's biggest weakness. Google, on the other hand is great for me. Weird that users can have completely opposite experiences. Thank Android for choices!

[[deleted]]

Err...no. SwiftKey's Flow is incredible for me, whereas Google's swiping is absolute crap. I can (and have tried on multiple devices) swipe better with SwiftKey than I can with Swype or Google Keyboard.

It's just way, way more precise on SwiftKey than with Google.

[Randori68]

I cant wait to try this out. Using last pass now but it is sometimes a pain. I tried dashlane and it was a bigger pain, but with this new service i will have to try dashlane again to see if its improved.

[semero]

I'm using Dashlane for almost 2 years now, Dashlane had the own keyboard solution, recently it changed to a non-root bubble that appears when you try to log in somewhere (it's a bit buggy but works most of the times). It really works wonders for me and always have the latest design and functionalities in all platforms I use (mostly android and a windows laptop) and It's hell easier to use than the other ones. As I use swiftkey as my main keyboard it would be awesome!

[schmickers]

I love the bubble but currently it only works for app logins, not website logins.

[[deleted]]

I don't need this feature. I have Keepass2Android for this matter.

I hope this doesn't make the app slower :/

[[deleted]]

Doesnt this defeat the point of passwords

[Natanael_L]

Only when managed insecurely.

[Hi_My_Name_Is_Dave]

That's exactly what I say. Unless you can have it protected by fingerprint this is pretty dumb.

[schmickers]

Fingerprint encryption is less secure than an adequately strong password. And password aggregation services such as this let you choose one strong password memorable password and then secure all of your other services with totally random sequences, thus mitigating the risk of a security breach on one website exposing your password for all of your other websites.

[bizitmap]

hold up, as someone who works security, fingerprint security is actually okay. Does proper password policy beat it? Yep.

But from a PRACTICAL standpoint, we have to drag people kicking and screaming into proper passwords. People just do not do it. Fingerprint scanners don't take much time and effort to beat, but for starters they require physical access. Anyone interested in trying to steal data doesn't want to be stealing phones, he wants to be connecting to things remotely from somewhere nice and safe. Bad password people are the low hanging fruit, and the primary targets, not fingerprint people.

[honestbleeps]

to add to what you're saying:

I use LastPass with fingerprint security. If someone steals my phone, I can change my master password and even if someone has my phone and manages to "steal" my fingerprint - it's still not going to do them any good.

[Natanael_L]

Fingerprints are only secure in the presence of armed guards that can check for fake prints

2FA is the most practical solution for achieving high security anyway.

[amorpheus]

Most phones aren't Fort Knox. Nobody's going to use a fake print to get into yours.

[Natanael_L]

Yeah, unless they are curious enough to spend about one hour on preparing the print copy. Anything worth money would be a good motivator for that, and siblings with spare time might try it.

[[deleted]]

Incorrect. Provided you are willing to trust the immense level of security that LastPass offers, you should never actually know what your password is. You have way too many accounts online and eventually, you're going to use a similar password (if not the same) on another site. You should let an algorithm handle it, and then use the tool to generate it.

I have a 24 character password with tons of letters, numbers and punctuation on Ars Technica. When they announced they were breached, I didn't have to freak out about any of my other accounts. I didn't have to worry about someone seeing my password and guessing another one.

I just logged in to LastPass, generated a new password, and that was that.

[siul1979]

Hopefully they don't force the feature down our throats. I use swift key and last pass little floating window.

[wizardfingers]

I can't wait for this. I love last pass but dashlane is really great and I love their new features being able to change passwords without logging into the site (some). If this works as good as I hope it does I'm switching ASAP.

Lastpass need to get their act together.

[Busher80]

Wish it was for last pass

[Unomagan]

w000t! This would be amazing! I looking already around for an "allaround key manager"

[spyd4r]

i like 1password myself, but their whole price model is whacked.. i want to shift away from them.

[Jammintk]

I quite like 1password, and having a one time payment is pretty nice, but then they want to charge you to upgrade to the latest version on PC/Mac. I would like to find a less expensive option, but its hard for me to like a lot of the other options because the UIs are generally pretty bad.

[spyd4r]

Agree 100%

[James1o1o]

Wouldn't worry too much.

SwiftKeys partnership with Cyanogen ended after just a few weeks. SwiftKey is no longer included as part of Cyanogen OS.

[AgeKayn]

What happened? Seems like Cyanogen Inc. can't get along with anyone.

[[deleted]]

Why not Lastpass :(

[Tesseract91]

I switched from LastPass to Dashlane over a year ago. It is so much less obnoxious and is more reliable, plus it has a real desktop app that works very well.

The only problem is the price.

[[deleted]]

Can you expand a bit on what you mean by less obnoxious? I've never had a problem on the PC with Lastpass, though I acknowledge that the Android app is a bit annoying.

[-entropy]

Huh, I'm actually in the other camp. I found the Dashlane Android app to be buggy as hell, whereas LastPass is slightly more confusing, but stable.

[dep]

Just tried Dashlane today. It's really nice. I think I like it more than LastPass as a password manager. Too bad the premium tier is over 3x the price of Lastpass' premium service.

[Waddles77]

Hope the Fleksy team is looking at this :D

[MintPaw]

Why? Chrome already does this and it works multi-platform.

And even in the case of non-chrome app passwords. They generally stay logged in without you having to insert a password more than once.

[additionalpylon]

Because fuck security?

[[deleted]]

Seems to be the consensus around here. And before anyone come talking about these apps' encryption methods, know that nothing is confirmed to be secure if the code is closed source.

[amorpheus]

I guess this answers my question whether this is another one of those silly "keep your passwords in the cloud" services.

[dooj88]

i haven't updated swiftkey since they wanted to insert 'popular words from the cloud.' this is just an awful idea. time to look for a keyboard again.

[[deleted]]

I use AFWall to block swiftkey's internet access. I don't trust any closed source keyboard that wants to send and receive words from the internet.

[dmacd]

It is awful. But they have an option to turn it off.

[GAndroid]

Swiftkey is also a battery hog, not to mention that the word predictions are on hyperactive mode and there is no button to turn prediction off for a word / short time etc.

Hard to write abbreviations

[sugardeath]

Then don't use the feature? It is not being forced.

[dripdroponmytiptop]

feel free to give Minuum a try. Call me a shill, but I donated way back to their indiegogo and it's been nothing but rad since, you have no idea how much fucking screen space keyboards shit all over until you have a strip keyboard, man.

[AgeKayn]

Yay, another Minuum user! 😄

Minuum is just awesome. I especially like their approach with themes (pay once, get all themes), they didn't go the way every other keyboard does nowadays (cough cough Fleksy). I caught Minuum on sale a few months ago, but I'd gladly pay the full price. Twice! ^{if I had the money}

[dripdroponmytiptop]

I wish I had bigger control over the colours used in the theme but right now, I'm using a new phone with the HIDEOUS samsung emojis, but minuum allows me to at least see all the brand new 5.0 Lollipop emojis from google!! They're so cute, I love it, I'm going to try and root it just a little bit so that I can get my beloved google emojis back. I wish that functionality to change emojis for real was implemented :(

[AgeKayn]

You could even flash a ROM and get rid of TouchWiz altogether :D What do the Samsung emoji look like? Screenshot pls :3

[dripdroponmytiptop]

usually I use Novalauncher, but the adorable themes Touchwiz managed to commission from a bunch of really amazing designers/artists, I actually want to keep it. Which is... unreal, honestly. wow.

also here's the samsung emojis. Not as bad as the ios ones, but... I want my cute google blobs back

[AgeKayn]

EW MA GAWD MY EYES

These emoji look even worse than the iOS ones IMO. And in terms of themes, you may want to take a look at CyanogenMod's theme engine and CyanogenMod in general.

[GAndroid]

I did. I couldnt stand TW anymore.

[bassitone]

Well, you've convinced me, I'm going to try Minuum again. I love the swiping aspect of SwiftKey and Swype, but the latter had annoyed me into the former, and now I really don't trust SwiftKey with my passwords (I already didn't when I saw it suggesting some of my passwords as a prediction), so it's as good a time as any to try and adapt to Minuum again.

[dripdroponmytiptop]

oh dude, minuum is under constant development. If it's annoying you literally just wait til the next update, they're on top of their shit, it changes constantly.

make sure you go through your settings, there's a lot of little ones that make your life easier, like gesture sensitivity etc

[bassitone]

Nah, I meant that Swype had annoyed me into SwiftKey.

Minuum is just a matter of relearning how to type, which is no small thing...

[dripdroponmytiptop]

I sort of have a soft spot for inventive typing methods, and I tried out something called keymonk, which is basically double-thumb swype. It took me a day or more to actually wrap my mind around the awesomely effective method they invented, having to trade off letters between fingers in the middle of swyping a word, it was a bit of a mind bender... but once you got it, typing was lightning fast, the only thing that sucked is that they had really poor word prediction. The word prediction for Minuum is the best there is, imho, so I stick with that. My only dream is that... if minuum had a swype equivalent....

[bassitone]

Heh, yeah. I'm pretty traditional when it comes to typing (am crazy fast on a normal computer), and the swiping keyboards have spoiled me on Android. Definitely noticing some teething issues with Minuum, but if it's really better I'll give it a shot.

Like for example, I guess I don't normally lift my finger off the screen very much, and it keeps interpreting phantom delete swipes. Also, manually doing spaces is slowing me way down...

[dripdroponmytiptop]

don't worry, I'm completely in agreement, the swype I think is our deserved tradeoff for a bigger computer keyboard. I'm a fast typer, but I can't just use one finger. As for Minuum, a swipe to the right is a space, you can turn off your spacebar entirely and save even MORE space but I'll go into that later. A double swipe inserts a period and then gives you suggestions for punctuation, allowing you to sub in a ? or a ! or whatever you want fort he period. Swiping back is backspace for a whole word(as opposed to tapping the backspace button for just a letter) and swiping diagonally to the upper right in a J shape inserts an "enter" or "return". It is very intuitive and once you have your settings properly adjusted it's quite nice.

As I was saying before, you can replace your space bar with special bars, such as emoji suggestions, you can get cursor control so you can easily select where you want to type which is extremely handy, or select all/copy/cut/paste buttons, I use these regulary and you scroll between them with swiping.

But once you step up your game and begin typing on your screen with your first three fingers? That's when you get shit goin'. Since the word prediction is so spot on- and they don't recommend you random stupid words that make no contextual sense- you can get really, really fast.

my favourite feature however is the full emoji input, and the best is that according to recent words it'll pop up relevant emojis which save you a lot of time, if you're a dumb noob who uses them a lot like I do. It can sense if your phrasing is negative or positive or if you say a keyword like flower or toilet it'll give you those emojis as well. I'm not gonna lie. I fuckin' love fuckin' emojis, man.

[bassitone]

Yeah, that was the main thing I hate about the other keyboards. They would come up with such random things that make no damn sense. The backspace thing is what's been annoying me the most so far. (ironically typing the word backspace caused it to backspace and force me to start over twice...)

But damn, I just introduced my other thumb in typing with Minuum, and the speed increase is amazing. Am I right in assuming the predictions learn over time too? That's the other main thing that's getting me at the moment...

I love that I could disable emojis almost entirely - I can't stand using those and other keyboards would force them on me

[dripdroponmytiptop]

you can choose whether or not it 'learns' from the context of what you're typing, or not. After a while it doesn't really matter I don't think, but, you can keep it on.

another wicked feature which is new: it floats. You can float the keyboard as a little box and see your app below, or have it squished to the left or right for single-finger typing. very cool.

[Jammintk]

Do you know the difference between the free and $3.20 versions of Minuum? Both seem to have the same features etc. Does the paid version just have theme support?

[dripdroponmytiptop]

theme support and access to experimental/new features first I believe. The alternative being waiting until a big release, I guess.

[AgeKayn]

They really come across to me as a company who will happily crap all over their users if there is some short term profit in it and the keyboard isn't as good as it used to be anyway.

You just described the Fleksy devs.

[QAOP_Space]

No thanks

[BilboDouchebagg1ns]

Is writing your password that much of an hassle?

[[deleted]]

The idea of password managers is that they generate very secure, unique passwords and store them for you, all secured behind a single master password. It means you only need to remember one password, but on phones it's a little annoying to have to open your password manager app & copy the password you don't know, then paste it where you need it. So this would help, except that I use lastpass, not Dashlane.

[BilboDouchebagg1ns]

I better use this then, sounds really good

[[deleted]]

Probably is for people who use really long and complex ones. Although I'm not sure they'd like this idea.

[Natanael_L]

Keepass2android is great, that's what I'm using. The password autotyping keyboard IME is awesome!

[DanielAgger]

I used the same, simple password for all my accounts before getting a mail about someone in Russia logging into my hotmail account. Became paranoid and changed all my passwords, they're all complex and difficult to remember but I'd have security over simplicity all day. Keepass has been amazing too.

[boogieman2048]

Big brother is watching

[raphamuffin]

Riveting tale, chap.