Migrating a small company off LastPass to Passwork after the latest breach, few things im unsure about

The Lastpass Klue breach news last month were the final straw for us, and tbh it's long overdue. Our vaults weren't touched but it's the 8th incident since 2011 so...time to go. We're migrating to Passwork, it has the features we need for audits and EU residency regulations (we’re EU-based, inferrably).

Im handling the migration (and yes Ive been stuck on it for nearly 2 weeks) and have a couple of things I want your guys' opinions on:

-How long, if at all, should I run both vaults in parallel for a while or should I just rip the bandaid off?

-Do you have any importation advice overall? Im afraid that I'll omit stuff, carry over duplicate URLs, that type of thing.

Im kinda new to both the company and the job post itself so this is my first time migrating. I appreciate any advice, especially ones you wouldnt typically find in migration forums (because I read ALL of those already haha).

reddit.com
u/Sbaakhir — 3 days ago

read the ETH zero-knowledge paper today and now im questioning everything. how do you tell real zero-knowledge from vain marketing?

Ive been maintaining Passwork on-prem for my company for a while now, though I wasnt the one to implement it, it was the guy that the employee before me picked it for the company. I have no problem with it and I like some features like exportable audit logs. Though recently just out of curiosity I've started doing some research on what password managers should and shouldn't do/have so I went down a rabbit hole and a term that intrigued me is, well you guessed it, zero-knowledge, and I came across the ETH Zurich paper (the USENIX 2026 one, here: https://ethz.ch/en/news-and-events/eth-news/news/2026/02/password-managers-less-secure-than-promised.html) and it kinda broke my brain. I've been reading about zero-knowledge architecture for the last few hours trying to figure out what the term even means in practice, because the more I read the more I think the label has been stretched beyond recognition. What keeps tripping me up:

-Vendors that encrypt vault contents but store URLs and site names in plaintext "for autofill performance." Zero-knowledge, except the vendor knows every site every user logs into and when.

-Tools advertised as zero-knowledge that also offer email-based "account recovery." By definition there has to be a backdoor for that to work, but the marketing copy doesnt mention it.

-The ETH finding itself: cloud vaults where the client retrieves the server's public key during enrollment without out-of-band verification. A malicious server hands the client an attacker-controlled key and the client cant tell.

So now im trying to figure out how you actually identify zero-knowledge when you see it. My questions are:

-Is there a clean technical definition of zero-knowledge that holds up across implementations, or is the term inherently (and maybe even purposefully) undefined/fuzzy?

-What feature or design choice immediately disqualifies a vendor from honestly claiming zero-knowledge in your view? (recovery flows, plaintext metadata, server-side key derivation, something else?)

-When evaluating a new password manager, what's the fastest test you apply to call BS on a "zero-knowledge" marketing claim before you go deeper into the docs?

-Most importantly, is "zero-knowledge" even the right thing to be optimising for, or is it a marketing label that distracts from threat models that matter more in practice?

Thanks

u/Sbaakhir — 8 days ago
▲ 244 r/Parenting

How can I be present for my kids after a 10-hour work day? My brain is completely fried.

I (35F) work around 50-60 hours a week in banking. On a good day, I'm working from 8 AM to 6 PM, but it often bleeds into the night. We have two young kids who need to be in bed by no later than 8 PM.

My partner does a lot of the heavy lifting with childcare in the late afternoon (picks them up, gets them fed, bathes them, pyjamas, bedtime stories, yada yada) because, most of the time, by the time Im home, I'm walking straight into the middle of the bedtime routine. Although I am physically there, my brain is completely fried, I have zero patience and no mental energy to actually engage or play or listen.

Work offers some good benefits like nilo counselling and performance-based bonuses, which can include extra PTO (but tbh bonuses are a double edged sword because sometimes it pushes you to subliminally want to perform more, which is even MORE stressful), less hours aren't on the table tho. I can't just quit or take a pay cut right now, I also already wake up at 6 AM, but it pains me to think that my kinds will grow up with an absent mother, where in retrospect, Im doing all of this for them. How can I quickly decompress after work and be more present? And during work itself, do you have any tips for may be boundary-setting or managing stress? Any advice is appreciated.

reddit.com
u/Sbaakhir — 11 days ago
▲ 2 r/work

Does anyone else feel insecure in their position as AI is slowly swallowing roles?

Im a copywriter, a field that's getting chipped down a lot with AI, Im lucky enough to be working on very specific aspect of copywriting so Im still immune, but the pressure to outperform AI is getting stronger by the day. Every day I see tools getting faster/better and my managers are bound to notice one someday and try it out. If it works, Im done for.

​

Im taking on massive workloads just to prove my human value and show I can do things an LLM cant, but it's destroying me. By the time I log off my brain is completely fried, it's like a 5 to 9 lobotomy, for lack of better words. I wallow on the couch and doomscroll all night soon as I get home, mindlessly distracting myself from a seemingly inevitalbe future. I miss having a personality and actually doing things I enjoy, I no longer have the mental capacity to do anything except for existing.

​

I dont know if I need a better skillset/full career revamp or therapy, but either way I think the latter is the immediate one because anxiety is eating me alive. My company offers 1on1 support from nilo though Im apprehensive about taking it because 1 it just feels like I'll flag myself to HR and 2 I don't know how confidential everything is, imagine I rant about certain aspects of work and I get ratted out. And no, private therapy isnt an option, Im trying to salvage every penny I get for an uncertain future.

​

What should I do? Im sure other have experienced this too and I hope I came to the right place.

​

reddit.com
u/Sbaakhir — 14 days ago

ELI5: Does a flight from Australia to the USA cross Europe to the west or go through the ocean from the east?

Do a flight from Australia to USA cross Europe to west or goes through Ocean from East?
If it is to the East , this does not that earth is round?

reddit.com
u/Sbaakhir — 22 days ago

ELI5: what's the difference between DVR and NVR

One is digital video recorder and the other is network vudeo recorder but what's the difference

reddit.com
u/Sbaakhir — 28 days ago

IT graduate want to learn camera serveillance installation. any advices from where I begin?

IT graduate want to learn camera serveillance installation. any advices from where I begin?

reddit.com
u/Sbaakhir — 29 days ago

What's the maximum daily amount ti extract for Edinar card from ATM

As the title says .

What's the maximum daily amount ti extract for Edinar card from ATM

reddit.com
u/Sbaakhir — 29 days ago