# What If My PAssword Manager Company Goes Away? **URL:** \ **Category:** Factual Questions\ **Created:** [August 29, 2019, 4:32am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398 "2019-08-29T04:32:27Z")\ **Posts on this page:** 18\ **Page:** 1
**Author:** ![Paul\_in\_Qatar](https://avatars.discourse-cdn.com/v4/letter/p/ccd318/32.png) [@Paul\_in\_Qatar](https://boards.straightdope.com/u/Paul_in_Qatar)\ **Post date:** [August 29, 2019, 4:32am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/1 "2019-08-29T04:32:27Z")
So the _Failing New York Times_ is telling me I need to use a password manager. It will be fun they say. As I understand it, this program will enter my passwords for me, it will even create good strong passwords. I suppose I will not even know my own passwords. So what happens to me if LastPassFree or 1Password goes broke? Will the app still work? I need reassurance. ---
**Author:** ![thelurkinghorror](https://avatars.discourse-cdn.com/v4/letter/t/7c8e57/32.png) [@thelurkinghorror](https://boards.straightdope.com/u/thelurkinghorror)\ **Post date:** [August 29, 2019, 4:58am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/2 "2019-08-29T04:58:41Z")
Well, you can export your passwords. Going bankrupt doesn’t mean they close overnight. There’s also KeePass, which I’ve never used, but makes you store the password file (e.g. on Dropbox). ---
**Author:** ![Aspidistra](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/aspidistra/32/3894_2.png) [@Aspidistra](https://boards.straightdope.com/u/Aspidistra)\ **Post date:** [August 29, 2019, 5:18am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/3 "2019-08-29T05:18:02Z")
Then you click the little “I forgot my password” buttons on all the websites you visit, and make new ones. ETA: Just don’t lose your main email password. One thing not to put in LastPass… ---
**Author:** ![md2000](https://avatars.discourse-cdn.com/v4/letter/m/73ab20/32.png) [@md2000](https://boards.straightdope.com/u/md2000)\ **Post date:** [August 30, 2019, 5:06pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/4 "2019-08-30T17:06:27Z")
Just hope your company’s system administrator doesn’t forget his passwords. I’m not a big fan of password management or even clicking “remember my password”. When my father had to go into a home, we were trying to help him. “What’s your email password?” He didn’t remember because the computer remembered it for him. Same for Facebook etc. you also better hope those password management companies have good disaster recovery options, especially if they are located near places where hurricanes or tornados hit. ---
**Author:** ![Lare](https://avatars.discourse-cdn.com/v4/letter/l/53a042/32.png) [@Lare](https://boards.straightdope.com/u/Lare)\ **Post date:** [August 30, 2019, 5:11pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/5 "2019-08-30T17:11:15Z")
> [@thelurkinghorror](#): > > There’s also KeePass, which I’ve never used, but makes you store the password file (e.g. on Dropbox). I do use this and you don’t **have to** store your password file on Dropbox. You can keep it local to a machine, on a jump drive, or on Dropbox if you’re so inclined. (And a big plus, IMHO, is thst, should they go away, so long as there’s a working copy of the program on my Windows, OR my Linux, OR my Android device, I still have my passwords.) ---
**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\ **Post date:** [August 30, 2019, 5:18pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/6 "2019-08-30T17:18:18Z")
1Password keeps its vaults on your local machine. They can be synced to the cloud, but if that source was lost, you still have an up-to-date copy on your computer. ---
**Author:** ![thelurkinghorror](https://avatars.discourse-cdn.com/v4/letter/t/7c8e57/32.png) [@thelurkinghorror](https://boards.straightdope.com/u/thelurkinghorror)\ **Post date:** [August 30, 2019, 5:50pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/7 "2019-08-30T17:50:05Z")
> [@Lare](#): > > I do use this and you don’t **have to** store your password file on Dropbox. You can keep it local to a machine, on a jump drive, or on Dropbox if you’re so inclined. > (And a big plus, IMHO, is thst, should they go away, so long as there’s a working copy of the program on my Windows, OR my Linux, OR my Android device, I still have my passwords.) Right, but I mean it’s a file you store through whatever means, not on their servers. ---
**Author:** ![Lare](https://avatars.discourse-cdn.com/v4/letter/l/53a042/32.png) [@Lare](https://boards.straightdope.com/u/Lare)\ **Post date:** [August 30, 2019, 8:50pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/8 "2019-08-30T20:50:13Z")
You are correct. I was amplifying your point. I rather like the program. ---
**Author:** ![Kent\_Clark](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/kent_clark/32/105_2.png) [@Kent\_Clark](https://boards.straightdope.com/u/Kent_Clark)\ **Post date:** [August 31, 2019, 12:24am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/9 "2019-08-31T00:24:23Z")
Google seems to have figured out how to capture all my passwords, even the ones I use for sites that never come in contact a Google-owned program (Google search, Google browser, Google cloud, etc.) I printed out a list of every password I have and keep it by my computer. This little Google feature is both convenient and scary. ---
**Author:** ![LaughingSnowman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/laughingsnowman/32/422_2.png) [@LaughingSnowman](https://boards.straightdope.com/u/LaughingSnowman)\ **Post date:** [August 31, 2019, 2:30pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/10 "2019-08-31T14:30:52Z")
I remember the days of jotting down my passwords on paper. I had so many and would eventually loose most of them. I’ve been using Lastpass for the past seven years and it’s been a lifesaver since it syncs across all devices and browsers. If they ever shut down you can just export your passwords to your desktop. Most software/storage companies warn you way ahead of time so you can save everything. ---
**Author:** ![Paul\_in\_Qatar](https://avatars.discourse-cdn.com/v4/letter/p/ccd318/32.png) [@Paul\_in\_Qatar](https://boards.straightdope.com/u/Paul_in_Qatar)\ **Post date:** [August 31, 2019, 2:48pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/11 "2019-08-31T14:48:12Z")
Also convenient and scary is the fact that my Brave browser also saves passwords. That being the case, why would I need a standalone password manager? ---
**Author:** ![AnalogSignal](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/analogsignal/32/1085_2.png) [@AnalogSignal](https://boards.straightdope.com/u/AnalogSignal)\ **Post date:** [August 31, 2019, 3:28pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/12 "2019-08-31T15:28:28Z")
> [@Kent\_Clark](#): > > Google seems to have figured out how to capture all my passwords, even the ones I use for sites that never come in contact a Google-owned program (Google search, Google browser, Google cloud, etc.) > > I printed out a list of every password I have and keep it by my computer. This little Google feature is both convenient and scary. I think you are talking about saving passwords in Chrome. Be careful. If someone hacks your gmail password, they will get all of these passwords too. ---
**Author:** ![Mama\_Zappa](https://avatars.discourse-cdn.com/v4/letter/m/71e660/32.png) [@Mama\_Zappa](https://boards.straightdope.com/u/Mama_Zappa)\ **Post date:** [September 6, 2019, 3:14am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/13 "2019-09-06T03:14:36Z")
> [@Lare](#): > > … > (And a big plus, IMHO, is thst, should they go away, so long as there’s a working copy of the program on my Windows, OR my Linux, OR my Android device, I still have my passwords.) 1Password is moving, as so many other tools are, to a SaaS model (Software as a Service)… whereby you must pay a monthly subscription fee to continue using the tool. I was able, though some digging, to find out how to do a one-time purchase. My data is synched between my phone and laptop using Dropbox. If I used their monthly subscription model, i’d pay more in about 15 months than it took to do the one-time purchase. AND my data would be stored on their servers. All this means that if 1Password were to shut its doors, I think there’s a very real chance the software might quit working. I’d have to look at their web page to see what happens to your data if you quit paying the fee; if “it’s still available, you just can’t modify it or add new passwords”, then you should still be able to use your local copy of the software. Of course you couldn’t install it on a new machine, I imagine. > [@md2000](#): > > I’m not a big fan of password management or even clicking “remember my password”. When my father had to go into a home, we were trying to help him. “What’s your email password?” He didn’t remember because the computer remembered it for him. Same for Facebook etc. Very good point - and my in-laws are in much the same boat. I’ve had to help them recover email passwords a couple of times. Actually this is an argument for having a password manager where your data is backed up elsewhere - as long as you have your master password or whatever written down somewhere. If I had my Dropbox password written down, and my 1Password master password, a family member could use that to get to everything else at need. I don’t, as it happens… but I could write them down and seal them in an envelope somewhere safe. Oh, and of course they’d probably need access to my phone, since so very many websites will now say “never seen this computer before, enter the passcode I’m gonna text you”. ---
**Author:** ![Spectre\_of\_Pithecanthropus](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/spectre_of_pithecanthropus/32/12343_2.png) [@Spectre\_of\_Pithecanthropus](https://boards.straightdope.com/u/Spectre_of_Pithecanthropus)\ **Post date:** [September 8, 2019, 6:13am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/14 "2019-09-08T06:13:48Z")
> [@LaughingSnowman](#): > > I remember the days of jotting down my passwords on paper. I had so many and would eventually loose most of them. I’ve been using Lastpass for the past seven years and it’s been a lifesaver since it syncs across all devices and browsers. If they ever shut down you can just export your passwords to your desktop. Most software/storage companies warn you way ahead of time so you can save everything. You do need to upgrade to the Premium version to have LastPass sync across all your devices, but it’s not that expensive and it’s well worth it. ---
**Author:** ![thelurkinghorror](https://avatars.discourse-cdn.com/v4/letter/t/7c8e57/32.png) [@thelurkinghorror](https://boards.straightdope.com/u/thelurkinghorror)\ **Post date:** [September 8, 2019, 6:10pm UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/15 "2019-09-08T18:10:59Z")
> [@Spectre\_of\_Pithecanthropus](#): > > You do need to upgrade to the Premium version to have LastPass sync across all your devices, but it’s not that expensive and it’s well worth it. How do you mean? The Vault is accessible on any device with the free version. ---
**Author:** ![Reply](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/reply/32/15952_2.png) [@Reply](https://boards.straightdope.com/u/Reply)\ **Post date:** [September 9, 2019, 3:43am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/16 "2019-09-09T03:43:58Z")
Just use the one in your browser. I think most (all?) the third party ones have been hacked. Google spends more on toilet paper than the worth of most of those tiny password companies. They don’t stand a chance… If you don’t trust Google, Mozilla offers the same thing. If either one goes out of business, just export it to another service. If you want more protection, you can turn on a master password and/or use two-factor authentication, such as your phone or a physical USB security key. ---
**Author:** ![beowulff](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/beowulff/32/542_2.png) [@beowulff](https://boards.straightdope.com/u/beowulff)\ **Post date:** [September 9, 2019, 4:07am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/17 "2019-09-09T04:07:14Z")
> [@](#): > > I think most (all?) the third party ones have been hacked. cite? > [@](#): > > Google spends more on toilet paper than the worth of most of those tiny password companies. They don’t stand a chance… cite? ---
**Author:** ![Reply](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/reply/32/15952_2.png) [@Reply](https://boards.straightdope.com/u/Reply)\ **Post date:** [September 9, 2019, 4:34am UTC](https://boards.straightdope.com/t/what-if-my-password-manager-company-goes-away/839398/18 "2019-09-09T04:34:48Z")
> [@beowulff](#): > > cite? Random ones… > **[Which Password Managers Have Been Hacked? – Best Reviews](https://password-managers.bestreviews.net/faq/which-password-managers-have-been-hacked/)** > > Password managers can and have been hacked. Discover the biggest password managers hacks over the years and what to do to keep your passwords safe. > **[Password-Manager Apps](https://team-sik.org/trent_portfolio/password-manager-apps/)** > **[LastPass is scrambling to fix another serious vulnerability](https://www.pcworld.com/article/406227/lastpass-is-scrambling-to-fix-another-serious-vulnerability.html)** > > Developers of the popular LastPass password manager are working to fix a serious vulnerability that could allow malicious websites to steal user passwords or to infect computers with malware. > **[Password managers hacked](https://www.komando.com/security-privacy/hackers-find-security-flaws-in-5-popular-password-managers-are-you-safe/547660/)** > > These particular password manager programs have been recently discovered to be easily hackable and vulnerable to leaks. > **[Hacking tool swipes encrypted credentials from password manager](https://arstechnica.com/information-technology/2015/11/hacking-tool-swipes-encrypted-credentials-from-password-manager/)** > > "KeeFarce" targets KeePass, but virtually all password managers are vulnerable. Those aren’t necessarily for the latest versions, but the point still stands: it takes a huge enterprise, bug bounties, full-time security teams, etc. to actively prevent and proactively patch flaws asap. Those small companies don’t have the resources. > [@](#): > > cite? Alphabet has about 90k employees, using maybe on average 100 rolls of toilet paper per person per year on average, costing maybe 50 cents? That’s $4.5 million a year. Lastpass was sold for $110mil, so I suppose that was a bit of an exaggeration 🙂 Though of course that’s not all spent on security R&D. Nonetheless, Google employs more than 500 security people ([Google’s Security Culture - Google Workspace](https://gsuite.google.com/learn-more/security/security-whitepaper/page-2.html)), among the best in the industry. They’re often the ones discovery the vulnerabilities in the other password managers to begin with ([Important Security Updates for Our Users](https://blog.lastpass.com/2017/03/important-security-updates-for-our-users.html/)). More seriously, it’s the cloud-synced passwords you should be worried about. The local stuff any malware can compromise, if you don’t use your own encryption password. But the cloud stuff… that’s where the enterprise-level security of Google or Mozilla or Microsoft, and maybe Apple, would hopefully be better. Especially if you turn on 2FA, or use Google’s Advanced Protection program.