4 ms·
LastPass has a web interface, is also available as a browser plugin and when I tried it the only password they asked for was my account password. So how come t
by bad_user 11y ago
LastPass has a web interface, is also available as a browser plugin and when I tried it the only password they asked for was my account password.
So how come they don't have your raw passwords? Because of their web centric approach, I doubt that they are encrypting it locally. And regardless, LastPass is a proprietary thing, so you can consider your passwords to be compromised anyway.
- quaunaut 11y agoThey are encrypting it locally. It isn't anything to doubt- it's been shown time and time again. Nowhere in the payload that gets sent to them is your key. The only way you could consider your passwords compromised is if you think there's already a rainbow table out there to decrypt everything, which is ludicrous.
- derobert 11y agoThere is an official, open-source lastpass CLI client: https://github.com/lastpass/lastpass-cli https://github.com/lastpass/lastpass-cli