3 ms·
Except using a secret key doesn't increase the day to day difficulty of using the tool. In fact, it makes it easier.
by xvector 4y ago
Except using a secret key doesn't increase the day to day difficulty of using the tool. In fact, it makes it easier.
- speedgoose 4y agoHow do you store the secret key? In your head? In a physical device you must carry around?
- ziml77 4y agoOn a printout and even inside the vault itself. You only need the key the first time you unlock the vault on a device. After that the key can be encrypted locally with just the master password or kept in the TPM (or the platform's equivalent).
- speedgoose 4y agoBut if you don’t have the printout and a device with the encrypted key, you cannot access anything. I’m not sure users are going to be happy.
- xvector 4y agoTo lose your passwords, you have to lose literally every device you have LastPass on and your printout and any E2EE backups of the key (e.g. to iCloud.)
- speedgoose 4y agoYes but it’s convenient to access your online accounts when you don’t have access to your devices and your printout.
- xvector 4y agoYou should never ever open up any password manager on a device you don't trust and own.