News for hackers. Stuff that matters.

A comment on LastPass users locked out (again) with infinite 2FA loop. Parent comment

Re:LastPass users locked out (again) with infinite 2FA loop by pasc1878 on Sunday June 25, 2023 @11:15AM (#36469083)
The big problem is that you have to store the information on 1Passwords site.

I can't see how any business would allow secrets to be stored on hardware they don't control

Earlier versions allowed the store to be on other sites like dropbox for syncing or on your own servers or a mix.

Note I do use 1password as I don't need any corporate secrets at the moment. It allows me to use other browsers than Safari and also Windows and macOS

[ Parent | on HN ]
Re:LastPass users locked out (again) with infinite 2FA loop by SparkyMcUnicorn on Sunday June 25, 2023 @12:09PM (#36469733)
Everything is end-to-end encrypted, SOC 2 certified, PCI and HIPAA compliant, and they've been audited many times https://support.1password.com/security-assessments/

If businesses can't trust any of that, then we wouldn't have any online businesses.

[ Parent | on HN ]
Re:LastPass users locked out (again) with infinite 2FA loop by throw1230 on Sunday June 25, 2023 @12:54PM (#36470228)
doesn't LP have the same certifications?
[ Parent | on HN ]