Protect what matters – even after you're gone. Make a plan for your digital legacy today.
Forum Discussion
strif4
3 years agoOccasional Contributor
Stop requring masterpass after every restart.
I find it a bit cumbersome and annoying that I have to use my master pass every time I restart my home computer and restart the browser (if I'm not using the desktop app).
Given I have to do this ...
Former Member
3 years agoag_mike_d, thanks for your reply, and I have been trying to sort this out with Support. First, I want to say that I'm very impressed by you and the other Team Leaders on the forums, and with the email support for your responsiveness. To be fair, I haven't really contacted LastPass, but there probably could have been issues I would have raised if I had known better (no preconceived notions with first time user of a password manager).
I did, however, manage to solve this problem myself in a somewhat inelegant way. I'm running Windows 10 Pro, MBR partition, TPM 2.0 enabled, no Secure Boot. I couldn't get the Windows Hello prompt to persist through restart. I tried to convert my partition to GPT so that I could enable Secure Boot, but got an error and it broke windows even though the conversion apparently went through. I didn't bother fixing the issue, and just reinstalled windows. Switched to UEFI, turned on Secure Boot, and voila. Windows Hello login persists through restart. I think the Windows Hello method is more palatable than entering the master password every time. Especially for other members of the household, and school age kids. I'll get back to support and let them know my solution too, perhaps it will help others. Users on Windows 11 probably never run into his problem because it requires all the stuff I had to update.
I'm trying VERY hard to decide to go with 1P over Lastpass Families during this trial period. There's some adjustment, but I like 1P as a company more and I'm impressed by the support. I'm trying to find workarounds for the biggest deal breakers, but there are still some items (unfortunately) holding me back. Here are a few:
Non-persistent login. I think Windows Hello can address this reasonably enough, putting in a shorter PIN hopefully is acceptable to my family. But I have 3 other PCs all using MBR and no Secure Boot...reinstalling Windows if the GPT conversion doesn't work will be a pain...but I guess it'll prepare me for Windows 11 (whole other discussion, holding off on upgrading).
When autofill doesn't work for some reason, LP allowed you to right click, then manually copy username/password. I don't see a similar fallback feature in 1P, unless you include opening up the extension/app, searching for the password, then copying the password. It's not too onerous, but not as convenient as being right in the context menu. Seems to me like this can be added?
Bigger issue is that only one person in the family can be in the app at at a time on a shared computer. I guess the workaround I came up with was to log in the "primary" user of a shared computer. Then if someone else needs to access their vault, a separate browser profile can be setup with that person's secret key, to access the vault via the website. Not as convenient as how each Chrome profile can have a different person logged into the extension, so I can access the passwords from multiple users without logging off the windows profile.
This could be somewhat alleviated with a one-direction shared vault, but 1P doesn't seem allow that. This may seem trivial to some, but as the resident technical person in the family, I might need access to my wife and kids' accounts, but don't want them messing with mine, or even having view access. They might be a security risk :P LP has an option that allows a shared user to "use" the saved password but without access to view the password.
- I am trying to get behind the tagging/vaults organization structure in 1P, compared to a more old-fashioned folder structure in LP. Tagging isn't bad, and you can almost simulate folders, but I think folders still make a lot of sense. This isn't the biggest deal I guess, will take some getting used to.
It's not a trivial move. I know some people can transition in 30 minutes, and use the import tool, but any software migration takes time to set up the way you like. Also, there will be some manual culling and resetting of passwords, all takes time. Never mind if my Windows setup isn't able to accommodate this right now.
The secret key is an interesting touch, though I think having different strong passwords for each site, 2FA and notifications from critical accounts (banks, CC, email), and maybe even double blinding some passwords, is probably sufficient even without the secret key. It does force one to be more judicious about whether to log into one's vault from too many computers. I guess that itself is protective, but I'm also worried about the possibility of getting caught without my phone and then I've lost access to my vault...
Anyway, congratulations if you read my whole post. Thanks