This is an obvious demonstration, but I think still an important one. Lastpass has said this about the breach: > These encrypted fields remain secured with 256

This is an obvious demonstration, but I think still an important one. Lastpass has said this about the breach: > These encrypted fields remain secured with 256-bit AES encryption and can only be decrypted with a unique encryption key derived from each user’s master password using our Zero Knowledge architecture. That all sounds great but the number of bits of AES and the cool "Zero Knowledge" designation is completely irrelevant here. It entirely depends on the strength of the user supplied password. So if your password is weak you are in trouble. The other message here is that if your password was installed before 2019 it is probably going to be a lot easier for an attacker to guess. That's it, that's the whole thing, but it still needs to be shown...