LogMeOnce Password Management Suite Premium - Review 2022

Passwords are terrible. Nosotros all hate them. But we're stuck with them until something better comes along. However, it seems like calculation insult to injury when the first thing a countersign manager does is ask you to create and remember...a main countersign! The developers at LogMeOnce feel your hurting. If you have a smartphone or mobile device available, LogMeOnce Password Direction Suite Premium is perfectly happy without a master password. Just be sure to keep that smartphone extremely well secured. This free countersign manager rivals LastPass in its wide feature fix, and offers more features than most of its for-pay competitors.

Like LastPass, LogMeOnce is totally free, with no limit on the number of saved passwords or on the number of devices yous use. It does brandish ads on its login page and some other pages. Certain advanced features aren't bachelor in the gratuitous edition; gaining admission to those requires that you lot purchase LogMeOnce Countersign Management Suite Ultimate. Other features accept limits not found in the paid edition. All the same other features are actress cost add together-ons fifty-fifty if you lot purchased the Ultimate edition. Still, this free countersign manager is more feature-rich than its competitors.

Speaking of those competitors, LogMeOnce can import passwords from LastPass, Dashlane, Roboform, and more than a dozen others. If you're looking to switch to a new password manager, importing from your old 1 certainly makes it easy. And LogMeOnce includes detailed instructions for each supported import source. LogMeOnce can also import passwords stored in Chrome, Firefox, Net Explorer, and Safari. KeePass is the import king, with the ability to import password information from more than than 40 competitors.

New Dashboard

Since my concluding review, LogMeOnce's user interface has completely changed, a total makeover. The main dashboard is mostly whitespace, with the big message "Call up Differently." To the right is a circumvolve of icons; you can put your own photo in the middle. The circle features these icons: Password Manager, Mugshot, Password Stupor, Productivity Charts, Two-Factor Hallmark, Secure Notes, Secure Wallet, and Anti-Theft.

I'yard not sure I see the betoken in using only a third of the available space for that circle of icons. I'grand besides disappointed that narrowing the window simply acquired the entire brandish to shrink proportionally in my testing. Simply overall, it'due south much more make clean and elegant than the interface in the previous version.

Those eight icons orbiting your photo represent just a few of the huge choice of available features. Many more features are available from the Smart Menu, organized into Productivity, Security, Reports, and General. You tin can launch any of the almost 2 dozen features directly from the Smart Card. Those using the paid edition can remove any unwanted icons from the dashboard and supercede them with features from the smart carte. Paying customers also get a Smart Carte without the third-party ad banner found in this edition.

Passwordless Authentication

You lot begin the process of signing upward for a LogMeOnce account past entering your first proper name, final name, and electronic mail address. Y'all too choose a security question and answer. Hither, every bit always, information technology'southward extremely important to choice something that nobody could effigy out by Googling you lot or eyeing your social media. Rather than take one of the predefined questions, add a unique question that has meaning to you lot, and only you.

Now comes the big choice. You can choose to create a passwordless account, or one that uses a master password. For testing, I started with the default passwordless account, and installed the necessary browser plugin. The account creation sorcerer sent a text to my iPhone with a link to install the LogMeOnce app. Once I entered my email address in the app, the Web page displayed a QR lawmaking for pairing. To finish off the process, I defined a six-digit PIN.

The free Myki Password Manager & Authenticator offers a similar manner of passwordless login, merely with Myki your passwords reside on your phone, not in the cloud. Yous demand a Pin or fingerprint to log in to Myki, but at that place's not even an option to apply a primary password. This might sound a scrap risky, but it's actually a form of two-factor hallmark. Logging in requires that you both take the smartphone and either know the Pivot or authenticate with your fingerprint.

You can employ LogMeOnce on any computer, merely y'all do have to install the browser extension first. One time you've done that, LogMeOnce sends an authentication asking to your smartphone. If the phone supports it, you can log in with a fingerprint. If not, that vi-digit Pin does the job. Bear in mind that a hacker couldn't practice anything with the PIN lonely. Authentication requires knowing the PIN and having possession of the smartphone.

Annotation that because LogMeOnce's desktop version is a browser extension, it's only enabled for the browser where you installed it. If you try to log in from a different browser, LogMeOnce prompts you to install that browser'southward extension. Because LogMeOnce is totally browser-based, it'south not limited to a specific platform. Information technology works but the same on Windows and macOS devices. You can even use information technology under Linux (something I haven't tried). Information technology's also available in the app store for both Android and iOS devices.

New Onboarding Process

If you've never used a password manager before, the first steps can be a bit daunting. LogMeOnce now includes a thorough training for new users. Information technology's a significant investment of time, then don't start it unless yous're ready to get all the way, learning the ropes and making configuration choices.

During the process, you'll choose whether to use LogMeOnce every bit null simply a password manager, or to enable its coincident features (you tin can change your mind later on). Some pages overlay informative text on the program's screens, showing what each icon does. Yous'll import passwords from your browsers, and optionally from a supported import source.

The onboarding procedure also walks yous through setting upwards features that merely aren't available in the free edition. These include Scheduled Login, Account Freeze, and Countersign SHOCK. I skipped these.

The next phase of onboarding, chosen Test Bulldoze, walks you through manually creating a password entry and adding a group, a secure note, and a credit card. Finally, you tin earn free secure storage by paging through what the programme calls trivia. These are screens calling attention to the program's unusual features.

Like many things well-nigh LogMeOnce, this procedure felt over-enthusiastic. For example, ane of the trivia pages illustrated the difference between LogMeOnce and every other password managing director with a picture of a shelf full of features for LogMeOnce, and a near-empty shelf with nothing but password direction for the remainder. A chart on the product's web page similarly displays a vast list of features, challenge but LogMeOnce has them. The question is, whether yous desire or need all these features.

PhotoLogin and Other Mobile Choices

There'south likewise an unusual hallmark selection called PhotoLogin. When logging in on the smartphone itself, this characteristic only snaps a photograph of whatsoever is in front end of the phone. If the photo matches what you lot expected to see, you tap to log in. I find this a bit mystifying. The phone is in my hand. How would the photograph fail to match what I only snapped?

The real value of this feature comes when you cosign your login from the browser-based version. So it'south similar to the tap-to-authenticate feature used by Keeper and others, though they use the mobile-based authentication as a second factor, in improver to the chief password.

Alas, using this feature to cosign your login from the browser-based version is a premium-just feature. Indeed, when I tried, it just showed a generic image. Withal, when I entered the PIN, it still unlocked my account in the browser.

While PhotoLogin seems alike to facial recognition, it really isn't. Yous, the user, verify that the picture show y'all are seeing is what you merely snapped. In my previous evaluation I noted that someone who picks upwards your unlocked phone can tap to verify, and thereby get full access to your passwords. In the current edition, you lot can't turn off PIN validation, which is certainly safer. Even so, if someone gets concur of your unlocked phone, the just protection for your passwords is that six-digit PIN, which is vastly less secure than a strong master countersign. If you decide to use this characteristic, be certain to protect your phone with a stiff password and biometric hallmark, and never put information technology down without locking it.

True Key allows truthful facial recognition for authentication, and you can configure information technology to cosign without the primary password. Indeed, if you've divers enough biometric and other hallmark factors, you tin can reset a forgotten master password. You can't create an account with no primary countersign, the way yous tin can with LogMeOnce, but y'all can configure True Primal to unlock based on factors other than the master password.

On your mobile installation, you tin can enable authentication via fingerprint, and you must create a Pin. You can log in to the browser-based edition on your desktop using either of these. When you practise, information technology directs you to check your mobile device. Just scan your print or enter your Pin to allow login on the desktop.

Calculation Applications

LogMeOnce comes with numerous short videos explaining all its features. On viewing a few of these, you lot'll quickly realize that past applications this product means what other products might phone call accounts, passwords, or logins. As with LastPass, Dashlane, RoboForm Everywhere, and about competing products, the LogMeOnce browser extension notices when yous log in to a secure site and offers to save your login credentials as an application. You can assign the new awarding to i of 7 predefined groups at capture time. Creating new groups used to exist a premium-only characteristic, just it's now available at the gratis level.

From the Smart Bill of fare, y'all tin can open the production's catalog of more than than 4,500 known sites. To add one to your app collection, but click it and enter your username and password. If a site is in the catalog, you know that LogMeOnce tin handle information technology, even if information technology uses a nonstandard login folio.

You tin also add an app manually. Every bit you start typing the name, LogMeOnce lists matching sites from its all-encompassing catalog. LastPass, Mucilaginous Countersign Premium, and a few others have a different approach to nonstandard logins, assuasive the user to simply capture data from all fields. LogMeOnce tin besides capture all data fields from oddball login pages, and it does so in a very clear and simple way.

For sites in the catalog, LogMeOnce displays the saved logo. For unknown sites, it grabs a screenshot. Yous can also choose a custom image.

Whether captured as yous log in or created manually, new apps use Single Sign-On by default. That means LogMeOnce volition log in automatically when you launch the app from the browser toolbar. If yous simply revisit a site that has login credentials saved, LogMeOnce asks whether you desire to log in, and which credentials to use when you accept two or more. Requiring some user interaction at this bespeak is important. Researchers have identified a technique whereby malefactors inject script into a page that creates an invisible login class, then harvests the login credentials automatically filled past the browser or password manager.

If you cull to enable Single Log-Out, logging out of LogMeOnce also logs you lot out of the site. That'due south a feature I haven't seen elsewhere.

With most competing products, y'all click the browser toolbar push button for a menu of available logins. LogMeOnce is a bit different, displaying a panel of icons representing your elevation 20 logins. Only click one to go there and log in. If y'all've saved a ton of sites, yous can find the desired 1 quickly by typing in the search box. Each letter you blazon narrows the listing.

LogMeOnce stores passwords for websites only, not for other programs. The only free password manager I've evaluated that handles passwords for programs (other than Android apps) is KeePass, which doesn't support the usual password capture and replay for websites.

Password Calculator and Password Policy

When you create a new account, LogMeOnce's countersign estimator offers to generate a strong countersign. By default, it creates 15-grapheme passwords using all graphic symbol types. That's ameliorate than Symantec Norton Identity Safety, which defaults to 8 characters. The default in Enpass Countersign Manager is an impressive 18 characters, but KeePass tops that with 20 characters. MyKi beats all the gratuitous and paid password managers I've evaluated with a default password length of 30 characters.

The name countersign calculator refers to the fact that it calculates the guess fourth dimension required to scissure any password you blazon into it. For example, information technology estimates 3 hours to crack "Password," but 78 days to scissure "Password!" with an exclamation mark. As for its own generated passwords, well, don't effort cracking those unless yous take billions of years to spare.

Launching Password Policy from the Smart Menu gives you some control over the policy enforced by LogMeOnce. The indicate of setting a password policy is to encourage good security habits. By default, your master password expires every three months, and you must replace it with a new master password you've never used before. Y'all can eliminate or soften the brake on previously used passwords, allowing reuse after three or five other master passwords. Those using the premium edition can change the expiry time to as short every bit one month or as long as one year. Of grade, this applies merely if you've added a primary countersign to your LogMeOnce account.

Past default, LogMeOnce requires that a main password consist of at least eight characters, containing uppercase letters, lowercase letters, and digits. If do choose to use a master countersign, I propose y'all brand information technology a strong password, well beyond the minimum requirements.

Two-Factor Bonanza

When you're using passwordless authentication, you've already got a form of ii-factor authentication. Nobody can log into your account unless they also possess your smartphone. Simply if you're looking for boosted security, LogMeOnce has a ton of options. Click Ii-Gene Authentication from the dashboard to gear up it upwards.

The 2-gene authentication page implies that you must establish a master password to use 2-cistron protection, simply I found that I could apply multiple factors along with passwordless authentication. You tin utilise Google Authenticator, or a Google Authenticator work-akin such every bit Duo Mobile or Twilio Authy, as a second factor. Making the connexion is equally uncomplicated as snapping a QR code with your mobile device.

Like Truthful Central, Zoho Vault, and others, LogMeOnce can send a one-time passcode via text message, for a second hallmark cistron. It can also transport that one-fourth dimension code as a voice call. But different any other product I've seen, LogMeOnce charges you for the privilege of using voice or SMS authentication. In the U.s., voice calls cost four credits and text messages price 2. Yous purchase credits in bundles of 1,000 for $x. Two-factor authentication via email is free, at least.

With oneID, Keeper, and a few others, phone-based authentication is a snap. Yous merely tap the notification that appears on your smartphone to allow the login.

Additional two-factor options get available in the premium edition. These include Selfie-2FA (photograph-based security), authentication using a prepared USB drive, and (for geeks only) authentication using an X.509 certificate. If you enable multiple two-factor options, your principal password plus any one of the other factors unlocks the account.

LastPass also supports text-based ii-factor authentication, at no charge, along with support for Google Authenticator and work-alikes. Security-minded folks can enter the LastPass master password using a virtual keyboard, one of the very few features not found in LogMeOnce.

While not precisely related to two-factor security, LogMeOnce'southward Mugshot characteristic besides helps secure your business relationship if someone else gets hold of your device. On a failed login attempt, this feature snaps photos with the front and rear cameras and transmits that information to your account, along with the device's location and IP accost. Note that the premium edition includes a total-calibration set up of anti-theft features.

Identity Profiles

Filling passwords into login pages isn't much different from filling personal data into Spider web forms. Similar many other password managers, LogMeOnce lets you define personal information profiles for Web form filling.

This utility'southward collection of personal data isn't as extensive as some, just it covers the basics. Personal data consists of starting time and last proper noun, email address, birthday, and gender (simply male person or female, not the dozens of choices yous get with Tinder). And you tin identify each telephone number as cell, home, fax, work, or other. I am pleased that the multiple phone entries correctly filled the matching fields, and that it filled an Age field by calculating from the contour'southward birthdate.

You can create multiple profiles, each of which must have a different email address. Within a contour you can create multiple instances of personal, address, telephone, and company data. RoboForm Everywhere is even more than flexible, with the option to add multiple instances of any field.

LogMeOnce lets yous save credit card details in its Secure Wallet. Cleverly, it detects the card type based on the number you enter. Like Dashlane, it creates a carte du jour prototype using the background of your pick, with the cardholder name and issuing bank. When you lot click in a credit bill of fare field on a Web form, y'all choose from the clear visual representations of your cards.

Sharing and Inheritance

When you point the mouse at an app in LogMeOnce'due south Cloud Dashboard, you see icons for sharing and for assigning a beneficiary, and (when available) automatic password change. I'll discuss automated password alter below.

Yous can share whatever of your passwords with another LogMeOnce user, using the recipient'due south email address. The free edition allows five shares; in that location's no limit in the premium edition. Equally with LastPass and Dashlane, the recipient can utilize the login but tin't encounter the password. If you choose to get in an open share, the password is visible, but read-only. In that location'south as well an option to prepare an expiry date, but only in the premium edition.

Defining someone as the beneficiary for a password is a different matter. The beneficiary gets access to your information merely afterward a specific waiting period. The similar feature in Dashlane, Keeper, and others lets y'all choose the waiting period, but LogMeOnce fixes the waiting flow at 45 days. You lot tin fix a beneficiary for up to v specific apps. A premium account tin have unlimited beneficiaries. There'south besides an option to crave proof of death before LogMeOnce releases the data. From the Smart Menu, you lot tin can define a casher to receive your entire account.

Countersign Reporting and Changing

When you get-go using a password manager, the first affair you do is get all your existing passwords into the collection. It'due south like shooting fish in a barrel plenty to let the password manager generate strong passwords for whatsoever new accounts you register. But somewhen, you lot actually must go back and fix any weak or indistinguishable passwords.

The Security Scorecard folio, reached from the Smart Menu, gives you an overview of your security status as well every bit what it calls a hybrid identity score. The latter is based on a handful of specific criteria, amid them whether you're using two-factor authentication and whether you've watched the training videos. Clicking for details on master countersign strength or overall password strength triggers an invitation to upgrade.

Really, the most important part of this study is at the bottom, which lists all your passwords, from weakest to strongest, and besides flags any duplicates. Similar LastPass and Dashlane, LogMeOnce can automate the password change process for many common websites. There'southward also a separate folio that only lists the passwords that it can modify automatically, with a big button to change them all.

LogMeOnce too provides productivity charts, different views of how you use the product. All the same, I'm not certain how many users need a bar graph of account activity, or a pie chart of which browsers got the nearly use.

Ultimate Features

A colorful Productivity Dock across the bottom of the dashboard offers quick access to of import features. As you lot indicate to icons in the dock, they expand, much as on the macOS desktop. And if you lot're using the free edition, the expanded icon is kind of a bummer. It displays a tooltip noting that you must upgrade to the Ultimate edition employ the dock. I would just turn off display of the non-functional dock.

The Devices tab nether Security lists all your devices, and lets yous delete a device that y'all no longer use. A map across the bottom lets you locate a missing device…but simply if you're a paid user. For those who've put upwards the money, LogMeOnce offers a full gear up of anti-theft features, among them remote locate, lock, and wipe, the power to display a message on the missing device, and an option to brand it band at top volume, in instance y'all've simply mislaid it.

When you go a notification on your mobile device that someone wants to log in to your account, you had better promise that someone is you. Users of the premium edition get a ton of information along with the login request, things like the associated electronic mail address, date/time stamp, IP address, and even GPS coordinates.

New in this edition, yous can attach files to whatever password or secure note. However, you merely get 1MB of storage with the complimentary edition. Every bit with Keeper Countersign Managing director & Digital Vault, even those paying for the product must pay again for more than storage, $9.96 per year for 10GB or $19.92 per year for 20GB.

Extra-Cost Add-Ons

I mentioned that even those with a paid subscription must pay again for added secure file storage. At an even higher level of secure storage called Secure Bulldoze, yous get a fully encrypted, fully manageable online storage bulldoze. Prices range from $39.96 per year for 50GB to $199.92 per year for 250GB.

Even those paying for Ultimate must pay a little extra for some features, including Scheduled Login, Countersign Stupor, and Account Freeze. Briefly, Scheduled Login lets you specify roughly when y'all intend to log in again; a hacker who attempts login at any other time doesn't stand a chance. Account Freeze lets y'all temporarily freeze account access, or lock it to your home IP accost. And Password Stupor activates one of viii annoying behaviors on attempts at unauthorized access to your account. Actually, those using the free edition get three activations of Password Shock, and those who've paid for the Ultimate edition go nine. Unlimited Password Daze activations is an extra-cost selection. I'll discuss these in more detail in my review of the paid edition.

At present, LogMeOnce offers 2 bundles. I includes the Ultimate edition plus enhanced Mugshot, Scheduled Login, and 10MB of secure file storage for $iv.99 per month, which comes to $59.88 per year. For $7.fifty per month, or $xc per year, you can up the storage to 20MB and add together Password Daze and Business relationship Freeze. Those prices are style outside the password manager norm. The page advertising the bundles does claim that you'll save $263.24 by ownership the bigger package. That figure made a piddling more sense to me after my contact at the company explained that the calculation assumes a 5-year program. A trivial.

Feature Overkill?

The pricing and comparison page on the LogMeOnce website lists 21 features that (according to the company) no other password director has. Many of these are the company's ain patented technology, so naturally nobody else has those. Merely I'm coming to believe that the reason other products don't include many of these is that they're not needed.

A niggling farther downwards, that same page lists 46 distinct program features, with three columns indicating feature support in the Premium, Professional, and Ultimate editions. In each row a blue dot indicates total support, a yellow dot indicates no support, and a dot that's one quarter, half, or 3 quarters bluish means partial support. Yes, you lot tin click each of the 46 items for a lengthy description, and an caption of those partial-support icons. I expanded all the descriptions and copied the table into Word, which reported that the resulting document would take 43 pages if printed. I salute the persistence of the authors of this page, but I doubt many users dig in for those details.

When y'all're using the gratuitous edition, at that place'due south no simple indicator for unavailable features. They're not grayed out or otherwise marked. You tin can, for case, tell Account Freeze to freeze access to your business relationship until a specific date and time. Only when y'all attempt to save your changes do you become the warning that this is a paid edition characteristic.

It'south clear the product's designers are very proud of their product and its many features, but I'm not convinced that this overflow of features is a good thing. I don't see a lot of value in the productivity charts. I haven't seen Unmarried Log-Out in other products, merely I also haven't wanted information technology. And while blasting loud music at a hacker, vibrating the hacker's device, and the other annoyances of Password Stupor sound cool, I really don't think information technology's necessary.

Excellent but Overstuffed

Despite the discussion Premium in its name, LogMeOnce Countersign Management Suite Premium is completely free, and it offers a boatload of features, many of which aren't found in any competing password manager. When we first saw information technology, nosotros were dazzled by the vast ocean of features. Lately we've come to appreciate countersign managers that do everything necessary, every bit unobtrusively as possible, and with consistency across platforms. In the commercial password manager realm, Keeper and Dashlane exemplify this manner, while still including advanced features like secure sharing, password inheritance, and an actionable password strength report.

The complimentary edition of LastPass includes those aforementioned advanced features, along with two-factor authentication, automated password changing, and more. It'south then consummate that we recently demoted its large brother LastPass Premium from Editors' Option, on the basis that information technology doesn't add together plenty value. In terms of the features we've identified equally important, LastPass matches LogMeOnce, and there's no confusion nigh what's available. Yes, LogMeOnce is the accented winner as far as characteristic count, and it will definitely appeal to some. But LastPass excels by getting the chore done without fuss. For at present, we're declaring LastPass our single Editors' Choice for free password direction.

Source: https://sea.pcmag.com/logmeonce-password-management-suite-premium/7667/logmeonce-password-management-suite-premium

Posted by: addisrensell46.blogspot.com

Share this post