3 ms·

They don’t have your passwords

• lmilcin 8y ago
  They don't, officially. Nothing is stopping them from updating the client to siphon your passwords or the encryptuon key, though. This is a problem all password managers have. It would be nice to have some kind of communication protocol that could be provably restricted from passing whatever the company wants.
• sytelus 8y ago
  They do store your "vault" on their server. It's encrypted though using key that doesn't leave your computer. However I can easily imagine deliberate as well as innocent "mistakes" in browser plugins and other weak links in architecture that would expose the master key and hence your vault.
  • woolvalley 8y ago
    That can pretty much happen to any software provider you download software from. You don't have the time to: - audit the source code - check every auto-update hash matches the main hash list "just in case" you get a special update just for you If you turn off auto-update, you will eventually get hacked because of bitrot