News for hackers. Stuff that matters.
Re:LogMeIn acquires Lastpass by quaunaut on Friday October 09, 2015 @12:48PM (#10361402)
They are encrypting it locally. It isn't anything to doubt- it's been shown time and time again.

Nowhere in the payload that gets sent to them is your key. The only way you could consider your passwords compromised is if you think there's already a rainbow table out there to decrypt everything, which is ludicrous.

Re:LogMeIn acquires Lastpass by bad_user on Friday October 09, 2015 @01:10PM (#10361607)
OK, I don't know how it works then.
Re:LogMeIn acquires Lastpass by Spoom on Friday October 09, 2015 @01:39PM (#10361887)
The encryption happens in a browser extension or mobile app, or in client-side Javascript in the case of accessing it directly through their website.