2140
Comments (300)
sorted by:
You're viewing a single comment thread. View all comments, or full comment thread.
1
Bucktooth34 1 point ago +2 / -1

LastPass was hacked but passwords are not stored in hashes. Hashing is not the same as encrypting.

The data was useless to the hackers because it was encrypted with the users master password and LastPass doesn't know your master password. Not defending LastPass, I fucking hate them, but the breach was useless if the user was using a unique and strong master password.

A password manager is the best option we have as every account needs its own unique password. If you want to write them down you can but a password manager makes it stupid easy.

You don't have to use a cloud password manager, KeePass or KeePassXC is local.

I'm not sure why I'm getting so much flack for recommending a password manager, it's the single best thing you can do for security. Password reuse and credential stuffing attacks are a huge problem. **Compound that with being a Trump supporter you're a huge target for crazy leftist. **

Everyone check out https://haveibeenpwned.com/ or https://leakpeek.com/ to see how bad it really is for yourself.

0
posedgeclk 0 points ago +1 / -1

Read my comment. I said hashes. That puts hackers that much closer to getting your passwords.

Oh, but nobody has the compute power...

Oh, but nobody has cracked that algo yet...

Famous last words.

1
Bucktooth34 1 point ago +1 / -0

I understand, but LastPass doesn't store your passwords in hashes and instead encrypts them. Hashing is not the same as encrypting.

Anyone with a master password longer than 12 characters and not reused is fine. We're dealing with very large numbers and using the AES256 standard.

AES256 is the default encryption, if it was broken Bitcoin and everything that is encrypted would be crashing. It would make world news, this very site would stop functioning.