2 ms·
There are seven embedded trackers in the LastPass Android app
- paulryanrogers 6y ago7 seems excessive. One possibly two could be justified since they aren't supposed to be able to decode the secrets inside the encrypted blobs. Not surprised some are strictly for marketing. Though perhaps it's good to isolate the various ones to minimize their access. Still, each one added is another vector with more attack surface for a highly trusted resource.
- hedora 6y ago> 1Password has none. KeePass has none. The open-source Bitwarden has two for Google Firebase analytics and Microsoft Visual Studio crash reporting. Dashlane has four. LastPass does appear to have more than its rivals.
- ScoobleDoodle 6y agoQuote from LastPass in the article: > "All LastPass users, regardless of browser or device, are given the option to opt-out of these analytics in their LastPass Privacy Settings, located in their account here: Account Settings > Show Advanced Settings > Privacy. We are continuously reviewing our existing processes and working to make them better to comply, and exceed, the requirements of current applicable data protection standards." The options I found in the privacy section: >Privacy >Track History Keep track of login and form fill history. >Help Improve LastPass Send anonymous error reporting data to help improve LastPass. That wasn't clear to me. But I usually disable those "Help Improve" things just for this reason: they're actually using it for marketing and sharing. I have now disabled the "Help Improve LastPass" option. But I'll still be trying out some different password managers and migrating now that I know they embed a plethora of different services in their product. This chain of security is only as strong as the weakest link and LastPass is adding several links unnecessarily. Their focus has drifted away from the core purpose it seems.