5 ms·
The hash would only be sitting in precomputed lists if LastPass did not salt the passwords first. It's my understanding that they did.
by snowwrestler 4y ago
The hash would only be sitting in precomputed lists if LastPass did not salt the passwords first. It's my understanding that they did.
- wlonkly 4y agoAh, we both went on a tangent. The password in question is to the twitterer's LastPass vault, and so a precomputed hash list would be of no use, and since it's an encryption key and not a hash, there is nothing to salt. I suppose the point was more that faced with many users' LastPass vaults there are more likely and less likely keys -- but they'll still have to try the keys.