I've been using Lastpass for a while, primarily because of Leo Laporte and Steve Gibson's enthusiasm for it. And it worked great. And then they made it a browser on Android, and then there was a new UI that didn't work on Windows, and now it's bad enough that I have to debug it when it tries to auto add a new site. The browser extension doesn't start up reliably (but that might be my own fault), and I'm generally pretty frustrated with the software and their support, to the point that I did not re-up my premium subscription. While troubleshooting Lastpass, I found that they were acquired by LogMeIn, and many users had disparaging comments and concerns about LogMeIn and the acquisition.
I looked around here and saw similar dissatisfaction with LastPass. This question, while similar in nature, has a different set of requirements.
Requirements in a password Manager:
- Support for Windows
- Support for Android
- Browser integration/support (For at least Firefox)
- Uses a TNO (Trust No One) model for security
- Synchronization, preferably with my own server, but cloud is OK with TNO.
- Secure password generation, with configurable complexity options per account.
- The ability to detect a new site automatically.
- Graceful support of other miscellaneous extra authentications (bank PINs, 2 factor, etc), or the ability to ignore it.
- Does not add unnecessary/unrelated features (for example, Lastpass on Android is/has a browser)
- Good/thorough support. Forums, how-tos, what have you. If paid software, then timely support with a noncumbersome UI (chat, email, etc).
- Not too much of a headache if the account is not a web page account.
Nice to haves
- Easy enough to use for me to recommend to nontechnical users
- iOS support
- Open Source
- Free as in $0
- Support for Tor browser bundle, PaleMoon
- Works/compatible with Seafile