News for hackers. Stuff that matters.
Re:LastPass says employee’s home computer was hacked and cor... by verteu on Monday February 27, 2023 @10:12PM (#34965213)
I don't think so. Per Lastpass's description of their architecture, their server never sees your unencrypted passwords. (Though substantial metadata, such as the website URLs, are not encrypted.)

To get unencrypted vaults, they'd need to change the client-side code. But we haven't been told that this happened.

(As a best practice, it's probably best to assume everything in LastPass vault was compromised at this point.)

There are no comments on this comment yet.