Firefox Lockwise vs LastPass
1. Platform Availability
First of all, before we get to the real comparison. It’s essential to know the platform availability of the apps. If the app is available on your desired platform, it makes sense to proceed. So, LastPass is available on all major platforms like Windows, macOS, Linux, Android, iOS, etc. It’s also available for different web browsers like Google Chrome, Opera, Microsoft Edge, and even Firefox. On the other hand, Firefox Lockwise is more of an extension of the Firefox ecosystem. It is only available for the Mozilla Firefox browser on the desktop. On mobile, you do get independent apps for Android and iOS. They can be used independently of the Firefox browser.
2. Interface
Now, since, Firefox Lockwise is exclusive to the Firefox browser, it can only be accessed within the Firefox window. On Firefox, under the “Logins and Passwords” tab, you can access Firefox Lockwise. Firefox Lockwise provides you the option to search, edit, and remove passwords. Apart from that, there’s not much within the Firefox Lockwise interface. Comparatively, LastPass is more feature-rich. LastPass has an independent interface. Apart from passwords, it also lets you save notes, credit card info, bank accounts, addresses, etc. Moving on to the mobile apps, Firefox Lockwise is more modern looking and minimal. When you open the Firefox Lockwise app, there’s your password vault and that’s it. LastPass, on the other hand, similar to the desktop app has different sections. There’s a section for passwords, card information, addresses, secure notes, etc. LastPass also has an inbuilt browser for more secure net banking usage. Moreover, LastPass offers a password generator on mobile which is lacking with Firefox Lockwise. Overall, LastPass is more feature-rich compared to Firefox Lockwise. On a side note, often in my personal usage, I noticed that LastPass autofill doesn’t work in older mobile apps. In that case, I would have to forcibly trigger LastPass autofill from the notification tile. Whereas, Firefox Lockwise autofill works on almost all apps.
3. Security and Encryption
Talking about security, both apps are on par in terms of encryption technology. LastPass uses AES-256-PBKDF2 encryption to encrypt both the username and passwords. On top of it, the master password again encrypts the hashed password. LastPass ensures that the passwords are encrypted and decrypted locally on your device. Lastpass only backs up the encrypted passwords to the LastPass cloud servers. This way, LastPass doesn’t have access to your original passwords or master password. You also have the option to set up two-factor authentication. LastPass supports Duo Security, Google Authenticator, Microsoft Authenticator, etc. You also have hardware token support from YubiKey and RSA SecurID. In comparison, Firefox Lockwise works a bit differently. It stores the password locally on your device. When you use the Lockwise mobile app, the data is synced from your desktop to mobile via Firefox servers. At that time, Firefox uses SHA-256 along with PBKDF2 and HKDF encryption. In the case of two-factor-authentication, Firefox Lockwise doesn’t support 2FA. But, you can have 2FA on your Firefox account. It supports third-party apps like Authy, Google Authenticator, andOTP, FreeOTP, etc. One problem that I encountered with Firefox Lockwise is the lack of a master password. Anyone who has access to your devices or laptops can see your passwords. Firefox does provide a solution for it. It’s called Primary Password. You can enable it via the Privacy Settings. Additionally, Firefox Lockwise has an extra trick up its sleeve. It’s called Firefox Monitor. It helps detect whether your password was compromised in a security breach. It works in parallel to Firefox Lockwise and you can also set up email alerts. Coming to the mobile apps, LastPass provides both master password and biometric authentication like fingerprint and FaceID. On the other hand, Firefox Lockwise doesn’t have a master password. However, it does support biometric authentication.
4. Security Breaches
Another important factor to consider while choosing a password manager is the security breaches that have occurred. It tells you about the vulnerabilities of the app and how quickly the company responds to it. LastPass has had many small vulnerabilities detected in the past. Amongst them, there’s been one major security breach in 2015. Luckily, there were no passwords compromised in the breach. However, users were advised to change and use a strong master password. Having said that, LastPass has always been quick to patch vulnerabilities. They also have a bug-bounty program running. Moreover, LastPass has created an environment for security researchers to report vulnerabilities.
5. Backup and Recovery
In case of backup, both LastPass and Firefox Lockwise backup passwords to the cloud. So, you can start using them on any system by signing in with your username and password. Additionally, Firefox Lockwise also stores passwords locally in 2 different files under the Profile Root directory – logins.json and key4.db. In terms of recovery, both apps allow the option to reset your password via email or mobile app. Both apps allow the option to export passwords. This way you can quickly pack your bags and switch over to another password manager. On a side note, do not store the exported file on your local device. The files have passwords and usernames stored in plain text on the exported files. They are not encrypted but should be.
6. Price
Firefox Lockwise is free to use and always will be. The password manager is there to complement the Firefox browser ecosystem. LastPass is free for basic users. You can use it freely on a single device. In case you want additional features, there is a premium that costs $3/month. It provides you an additional 1 GB of encrypted file storage, multiple-device sync, etc. You can also get a 6-user family subscription starting at $4/month.
Conclusion: Firefox Lockwise vs LastPass
If you are a Firefox user, there’s no doubt Firefox Lockwise would suit your end. However, if you are someone who stores card details, addresses, notes, and even your work stuff, it’s more sensible to use LastPass. Those who do not use Firefox as their primary daily driver should stay away from Lockwise. It’s very restrictive for desktop users. Users who aren’t part of the Firefox ecosystem and need a more robust solution should look at LastPass. The subscription of $3/month also makes sense. It provides you additional features like multi-device sync, 1 GB encrypted file storage, and regular password checks to eliminate vulnerabilities, etc. Also Read: How to Check If Your Passwords Have Been Compromised