this post was submitted on 06 Sep 2023
110 points (99.1% liked)

Technology

59135 readers
2825 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious…

you are viewing a single comment's thread
view the rest of the comments
[–] Zeron@lemmy.world 9 points 1 year ago (2 children)

And this is why you don't want cloud based password storage systems. If you want to use a password manager, use something entirely local like KeePassXC. The database it creates is so small you could fit it on a floppy so it's immensely portable.

[–] SkyeStarfall@lemmy.blahaj.zone 21 points 1 year ago

Cloud based systems can be perfectly sound. You can read how other managers do it, which are also audited by security experts. It's just LastPass being bad.

And sure, local can be more secure, but you're then at higher risk of losing access to it, should the worst happen.

[–] ExcessiveAardvark@lemmy.world 12 points 1 year ago

The problem is more that LastPass' system is bad. 1password (and probably others) mitigate a possible hack by having the keyring encrypted by something in addition to the password.