I've read multiple independent audits of the LastPass client (such as http://www.martinvigo.com/a-look-into-lastpass/ http://www.martinvigo.com/a-look-into-last

I've read multiple independent audits of the LastPass client (such as http://www.martinvigo.com/a-look-into-lastpass/ http://www.martinvigo.com/a-look-into-lastpass/) that haven't found any major issues, and for the issues they do find the LastPass team has always responded promptly. On the server side, LastPass's service is basically just encrypted blob synchronization, so the software doesn't particularly matter.