I made a post about customer service because it had been a week without a response, I had even tried mod mail, so this was a last resort. They immediately replied, then immediately deleted the post and messaged me directly instead. Things got rolling after that. But I've seen this happen to others as well. Left a bad taste in my mouth. Is this common for any password manager sub run by the company?

EDIT: for clarity, not this sub, the sub for their product. I'm posting here because they censor posts. Searching in here looks like others have experienced the same.

I've been studying how password managers make money, and the split surprised me.

- 1Password: about $400M ARR (company-reported), with business customers making up 75%+ of revenue (third-party estimate)

- Keeper: $225M ARR (company-reported), 95K+ organisations, says it's profitable

- Bitwarden: 15M users and 80K businesses (company-reported), no revenue disclosed. Individuals get a free plan, and teams pay.

So the consumer product looks like the way in, and the business plans look like where the money is. Pricing fits that: 1Password lists $2.99/month for individuals vs $7.99 per user/month for larger business plans.

Only around 14% of SaaS companies reportedly use a dedicated password manager, so there still seems to be room.

For people who've built or sold B2B tools: is "free or cheap for individuals, paid for teams" the right model, or does it just hand the market to the big players? What would you do differently as a small team?

#saas #passwordmanager

Hello,

I'm a bit lost when it comes to the different options available for securing my online accounts, and I'd appreciate some advice on setting up a more secure system.

At the moment, my setup looks like this:

- I use Google Authenticator for my Gmail accounts. Both the authenticator app and my email accounts (where I'm currently logged in) are on my main phone.

- I have a few banking apps on the same phone, protected only by a PIN. As far as I know, they don't support hardware security keys like YubiKey.

- I also have the Steam app on my phone, along with accounts on platforms like Epic Games and GOG.

Ideally, I'd like to remove all my authenticator apps from my main phone and enable two-factor authentication (2FA) wherever possible, especially for my banking apps.

I've been considering a couple of options:

- Two YubiKeys: One as my primary key and another as a backup, to secure my email accounts and other services that support hardware security keys.

- A dedicated phone for authentication: An old smartphone with no SIM card or phone number, kept at home and used exclusively for authenticator apps such as Google Authenticator.

However, banking apps seem to be the main limitation, since they don't appear to support hardware security keys and often rely on their own app-based authentication methods.

What would be the best setup in terms of security and convenience?

My main goal is to make sure that if my main phone is lost or stolen, my accounts remain secure and I can still recover access to them. Ideally, I want to keep the most sensitive authentication methods and backup options safely at home, without making it too difficult to access my accounts when needed.

Would you recommend using two YubiKeys, a dedicated authentication phone, or a combination of both? Are there any other options I should consider?

Thanks in advance!