News for hackers. Stuff that matters.
Re:LastPass: Security done wrong by danjoc on Thursday March 23, 2017 @04:50PM (#13944127)
It does. Using PGP in conjunction with a Yubikey means even if someone obtains your password repo, they still can't get in without your physical private key. Without using a Yubikey, an attacker would still need to obtain the private key. They couldn't just grab the vault from the cloud store and start running offline password cracking on it.

There are no comments on this comment yet.