3 ms·
I used to do that till lastpass had several vulns [1] in which passwords to all sites can be gotten by a malicious page or extension. If you use a password man
by sam_goody 9y ago
I used to do that till lastpass had several vulns [1] in which passwords to all sites can be gotten by a malicious page or extension.
If you use a password manager that auto fills in the paswords, it is open to an attack by a site or program that can fool it into thinking you have visited the site.
Any malicious extension such as the one compromised her, has a good chance of being able to drain all your passwords.
You are probably safer, even with phishing threats, to paste it in from another program each time.
[1] http://thehackernews.com/2016/07/lastpass-password-manager.html http://thehackernews.com/2016/07/lastpass-password-manager.h...
- cheez 9y agoI am aware of that bug. However, Google wants to replace lastpass with Chrome sync, so no surprise that their employees are attacking it. Hopefully that made it better. I doubt even pasting it in is completely secure.