LastPass is scrambling to fix another serious vulnerability

Josey Wales said:

That is exactly what I am telling you. I have this application that is called random password generator it can create random passwords and store them off line. I am retired, I have one device and no smart phone.

Well, there you go. That makes all of the difference in the world. Most of my computing time during the day is spent at work, so I need access to my personal passwords there. Then at home, I have my desktop, my sons desktop and my primary computer which is my mac laptop.

I dumped my passwords into Excel and just for myself, I have 162 passwords. This doesn't include the passwords I keep for my kids stuff and my wife's stuff.

Josey Wales said:

Yes but they are stored online are they not?

Yes, they are stored online. At present I store my passwords for less secure things in Evernote. Things like banking, retirement, car payments...basically anything with financial data is stored in KeePass inside of Dropbox. I can only access these from devices where I have KeePass, but these aren't things that I use on a daily basis and for things like my home banking, that password is memorized and not a randomly generated secure password.

The scary part online is that if somebody breaks into your Lastpass account, they get all of your other accounts. I cannot even image how long it would take me to go out and change my 162 passwords. It would take me an entire weekend.

I don't trust any form of online storage. I only ever store passwords in a password protected file stored on a Bitlocker protected USB stick kept in a safe location. My PC is never connected to the internet when I edit the file.

swarfega said:

Thats the whole nature of Lastpass. But the passwords are fully encrypted.

We'll probably never know if state intelligence agencies or others can crack the key? Best of luck if you are sure the key is safe.