Should you be concerned about LastPass uploading your passwords to its server?

summerheat · Mar 19, 2019

https://palant.de/2019/03/18/should...stpass-uploading-your-passwords-to-its-server

...
It is absolutely possible for a password manager to use a server for some functionality while not trusting it. However, LastPass has been designed in a way that makes taking this route very difficult. In particular, the decision to fall back to server-provided pages for parts of the LastPass browser extension functionality is highly problematic. For example, whenever you access Account Settings you leave the trusted browser extension and access a web interface presented to you by the LastPass server, something that the extension tries to hide from you. Some other extension functionality is implemented similarly.

...

LastPass has always been stressing that they cannot access your passwords, so keeping them on their servers is safe. This statement has been proven wrong several times already, and the improvements so far aren’t substantial enough to make it right. LastPass design offers too many loopholes which could be exploited by a malicious server. So far they didn’t make a serious effort to make the extension’s user interface self-contained, meaning that they keep asking you to trust their web server whenever you use LastPass.
Click to expand...

Log in or Sign up

Should you be concerned about LastPass uploading your passwords to its server?

summerheat Registered Member

Log in or Sign up

Should you be concerned about LastPass uploading your passwords to its server?

summerheat Registered Member

Useful Searches