> and giving someone else a copy of my passwords Except you're not doing that. You're giving someone else an encrypted blob. The screwup here is that LastPass

> and giving someone else a copy of my passwords Except you're not doing that. You're giving someone else an encrypted blob. The screwup here is that LastPass also stored a bunch of unencrypted metadata.