Lastpass is a huge target, and while I believe they generally take reasonable security measures, for many the risk of compromise may be greater than an encrypte

Lastpass is a huge target, and while I believe they generally take reasonable security measures, for many the risk of compromise may be greater than an encrypted stand-alone password database. Couldn't you frame that same basic belief around any large 'nearly-monolithic' web service, like Google, Apple, or Facebook? I agree, passwords are a risky business (you're storing security tokens for other people for chrisakes), but the power that access to someones Facebook or Google account is pretty equivalent - people run their worlds on those services. By the way, I happen to agree with your stance. We rely on singular entities far too much on the net.