3 ms·
LastPass does not use the secret key concept that 1Password uses, it only uses a key derived from your password. After the breach they rushed to increase the ha
by dathery 2y ago
LastPass does not use the secret key concept that 1Password uses, it only uses a key derived from your password. After the breach they rushed to increase the hash iterations [1] and added features to let enterprise admins set minimum iterations [2] but of course it was too late at that point.
[1] https://palant.info/2022/12/28/lastpass-breach-the-significance-of-these-password-iterations/ https://palant.info/2022/12/28/lastpass-breach-the-significa...
[2] https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass/policy_manage_hash_password_iteration.html&_LANG=enus https://support.lastpass.com/s/document-item?language=en_US&...
- _2d30 2y agoGot it, thanks!