I use KeePass with a password vault stored on SkyDrive but I would never use LastPass. The web browser opens up so many attack vectors that I don't trust anyth

I use KeePass with a password vault stored on SkyDrive but I would never use LastPass. The web browser opens up so many attack vectors that I don't trust anything they do. I know one person that used to use LastPass. He was a coworker that would utilize it on a shared terminal server and he would select the option to remain logged in. I logged in as me on the terminal server, copied his Chrome cookies file to another account and was immediately able to log in as him to LastPass and access every single one of his passwords. He deleted his LastPass account that day. There are plenty of ways to address this and other inherent security issues with it but I don't see evidence that the majority of non-technical LastPass users are utilizing any of them. Here's a discussion that I found about the issue I discussed on LastPass' forum: https://forums.lastpass.com/viewtopic.php?f=6&t=33329 https://forums.lastpass.com/viewtopic.php?f=6&t=33329