> at the very least it means lastpass can read all your passwords at any time. Not if it's been done right. They'd use some kind of multi-key secret sharing sc

> at the very least it means lastpass can read all your passwords at any time. Not if it's been done right. They'd use some kind of multi-key secret sharing scheme (like shamir), where the password database would be encrypted with the public keys of both lastpass (the custodian) and the designated person. (This would be done on the client side, by the designator.)