Re:LastPass: Security done wrong
by danjoc on Thursday March 23, 2017 @04:50PM
(#13944127)
It does. Using PGP in conjunction with a Yubikey means even if someone obtains your password repo, they still can't get in without your physical private key. Without using a Yubikey, an attacker would still need to obtain the private key. They couldn't just grab the vault from the cloud store and start running offline password cracking on it.
[ Parent
| on HN ]
There are no comments on this comment yet.