5 ms·
For starters, lastpass is using https, which is definitely better
by jcdavis 14y ago
For starters, lastpass is using https, which is definitely better
- shawabawa 14y agoNot really. It's only sending the hash of your password, not your password in plaintext. Although the hashes don't seem to be salted...
- pwman 14y agohttps, we're not using 'GET' parameters for the hash (which is almost certainly ending up in log files on leakedin's site). We also just came out with a version for eHarmony's breach: https://lastpass.com/eharmony/ https://lastpass.com/eharmony/