4 ms·
They talk about how the federated version is safer due to the long random master password, but... Federated LastPass is tied to your company's SSO, which means
by mac-chaffee 4y ago
They talk about how the federated version is safer due to the long random master password, but...
Federated LastPass is tied to your company's SSO, which means your real master password is technically a login.microsoftonline.com (or equivalent) cookie stored in plain text on your hard drive that is valid for 8+ hours. One bad "pip install" typo and your teams' passwords are toast. That was true even before the breach.