Re:LastPass breach gets worse – reddit.com/r/sysadmin
by acdha on Wednesday January 25, 2023 @08:37AM
(#34518076)
Password reuse is the most common way people are breached. Until there’s pervasive WebAuthn passkey support, that means you need a way to store unique passwords for everything you use and that can’t be algorithmic because different sites have conflicting policies.
Other password managers don’t have Last Pass’ long history of security concerns. They also have hardening against this specific scenario. For example, 1Password assumes they could be breached and includes a strong random key which is unique per-user so in an event like this the attacker would have to do a lot more work to break vaults:
Other password managers don’t have Last Pass’ long history of security concerns. They also have hardening against this specific scenario. For example, 1Password assumes they could be breached and includes a strong random key which is unique per-user so in an event like this the attacker would have to do a lot more work to break vaults:
https://support.1password.com/secret-key-security/