Facebook Plunges Again
Tumblr 101: Tips And Tricks To Get Started
LastPass now handles logins and form filling in any browser
Since I started using LastPass, it's become one of my top three Firefox addons. Yesterday, the development team released a new feature that allows you to securely access your passwords even if you're not using the Firefox or IE plugins.
LastPass can now work from a bookmarklet - great news for users of Opera, Google Chrome, Kmeleon, or virtually any browser on any platform that supports Javascript. It even works on your iPhone or iPod Touch.
To install the bookmarklet, log in at LastPass.com and look for the icon on the left side of your control panel. Click it, and an overlay appears with three links: LastPass Login, Fill (for passwords), and Fill Forms. Just drag them to your bookmark toolbar and you're set.
Joe Siegrist of LastPass offered a rundown of how the process works:
LastPass can now work from a bookmarklet - great news for users of Opera, Google Chrome, Kmeleon, or virtually any browser on any platform that supports Javascript. It even works on your iPhone or iPod Touch.
To install the bookmarklet, log in at LastPass.com and look for the icon on the left side of your control panel. Click it, and an overlay appears with three links: LastPass Login, Fill (for passwords), and Fill Forms. Just drag them to your bookmark toolbar and you're set.
Joe Siegrist of LastPass offered a rundown of how the process works:
"Your bookmarklets have a random number embedded in them that is generated locally using JavaScript, and then that number is embedded into the bookmarklet's code (also with Javascript). A hash is then created of that (which is also salted with your username) and sent to LastPass as a way to grab an encrypted copy of your key (encrypted with the locally created random number).While it's not action footage, the gallery will show you what steps to go through. Getting the bookmarklets on your iPod or iPhone requires adding them on your desktop and then performing a sync.
Your actual key can then be decrypted from a login session with LastPass.com + the local 256-bit random number. This allows LastPass to offer [bookmarklet] functionality while staying true to the privacy statement of never having access to your sensitive data."
The LastPass addon is a free download and works on Windows, Mac, and Linux. You don't need it to use the bookmarklets, though - just register for an account and use the web management page to add login and form filler information.
All my saved logins from years of browsing with Firefox can now be easily (and securely) accessed in Chrome, Opera, and on my iPod with a simple little button.
LastPass rocks.
Comments
33
Subscribe to commentsJonJan 21st 2009 5:49PM
Thanks, I should have seen that notifications can be disabled. As for the context-menu, I'm talking about right-clicking on the page. I don't use any of the options there so would rather hide them, and just use the LastPass button instead.
MKJan 21st 2009 1:31AM
I visited LastPass.com earlier and when I saw no Opera icons on the home page, I immediately close the window. Thankfully I saw this article, and decided to give LastPass another try.
Initially, I still have some problem understanding how to use LastPass. I thought there is a desktop interface that will allow me to add sites and passwords, just like KeePass and Password Safe, then save the encrypted data to LastPass. Ok, now I know that they were done through plugins and the website. Or maybe I am wrong again, how should I know :p
Perhaps LastPass.com (the main page) should display a quick 1-2-3 steps on how to use the software. Screencast doesn't work, because some people (like me) can't bother to stream and watch videos. And also, tell us that we can import data from popular password manager like KeePass and Password Safe, that's an important feature.
Reading comments from this entry, LastPass must be good. But if I have to search high and low on how to use it, it fails. At least, on me.
Until then, keep up the good work Joe Siegrist and the team :)
soniiicJan 21st 2009 4:58AM
What does lastpass have that supergenpass doesn't? i don't need my passwords being sent over the internet to lastpass everytime i want to log in to a site, even if they are encrypted!
supergenpass just generates your pass there and then from javascript AND it's always had a bookmarklet AND a mobile page so i can use it on opera on my mobile.
Don't get me wrong, i'm not bashing lastpass but I do use SuperGenPass and am wondering what real benefits this alternative has.
Joe SiegristJan 21st 2009 2:53PM
Take a look at: https://lastpass.com/features.php What they're doing doesn't really compare to what we're doing.
We see the Master password to generate a hash for each site as a flawed concept due to problems when you go to change your master password.
soniiicJan 21st 2009 3:23PM
"We see the Master password to generate a hash for each site as a flawed concept due to problems when you go to change your master password"
I don't really see it that way. *If* you ever need to change your master password then your password will change but that's no big deal when it only takes 30sec-1min to change a password for each site.
Looking at the features they don't seem all that different ;) given that you take away the features that involve storing or transmitting the password somewhere. onscreen keyboard, secure notes and automatic form filling are only the actual features which are different. Oh and identities which is a feature i don't really understand lol. why limit yourself in such a way? why not just not visit the site?
Therefore sorry but I'm going to be one of those pesky users who won't upgrade from an 'inferior' competitor :(
Joe SiegristJan 21st 2009 5:09PM
We have users with over 2500 accounts, the average user has ~100. Even at your time to change passwords (which is an underestimate), that's over an hour to change your master password, (and it will be a huge pain).
Find what works for you, but we looked into this concept and found it lacking.
Joe
Sten DagslottJan 22nd 2009 1:10PM
I wonder why lastpass doesn't work with Maxthon. Even the JavaScript bookmarlets don't work. I use both Firefox and Maxthon, and will continue to do so, but I'd love to be able to use lastpass on both.
Joe SiegristJan 22nd 2009 3:48PM
Maxthon has known issues with Maxthon Classic that they're not fixing (Avant has the same issue). With Maxthon2 they don't seem to have an easy way to run OCX's for the LastPass vault. We've reached out to them but haven't had much success.
Sten DagslottJan 22nd 2009 4:09PM
I don't know what OCX's is, but I guess that making a plugin for Maxthon2 won't solve anything, then?
Joe SiegristJan 26th 2009 11:38PM
We made it work in Maxthon2 (you can see their forums for the post on it), except for the LastPass Vault page -- we don't know why Maxthon2 doesn't support OCXs, and why they're ignoring our requests to fix the problem.
gotchabenMar 24th 2009 6:05PM
Joe,
My wife has signed up. I haven't yet. Here is the problem. If I understand correctly, you generate a passsword for each site I use that requires one. What happens when my wife and I use the same site from different computers but require the same password to access information (example a joint bank account).
Lee MathewsMar 24th 2009 6:06PM
Lastpass doesn't generate your password (unless you want to create one for a new login).
For existing sites, it just remembers the password you currently use. If you already have a login for your bank's site, Lastpass will simply offer to remember what you type in!
erbysu111270Apr 7th 2009 2:53PM
I need to get you to unscribe or reissued my new password that I need to avoid being asked to get online by you.