8 ms·
As soon as you put a Keepass encrypted database onto any cloud service (e.g. DropBox, Google Drive, etc) you've effectively just recreated LastPass. Both use a
by UnoriginalGuy 10y ago
As soon as you put a Keepass encrypted database onto any cloud service (e.g. DropBox, Google Drive, etc) you've effectively just recreated LastPass.
Both use an AES-256 encrypted database encrypted using a master password which is first hashed using a modern/slow hashing algorithm.
Obviously it is imperfect that the LastPass plugin has bugs in it; and I won't defend that. But I will say that the convenience is worth the risk most of the time, but LastPass needs to be better than this if they want to maintain people's respect and trust.
If you intend to keep your encrypted password database completely offline (e.g. USB keys) then, sure, it is more secure but very few users are willing to take on such inconvenience.
Password Managers in general have resulted in less password reuse, longer passwords, and more random passwords. Last Pass in particular offers "one click" password rotation on dozens of popular services.
- wsinks 10y agoOne click password rotation! I had no idea.
- UnoriginalGuy 10y agoIt is neat but only on a select list of popular sites, you can see the list at the bottom of this page: https://helpdesk.lastpass.com/generating-a-password/#h2 https://helpdesk.lastpass.com/generating-a-password/#h2