Viewing a single comment thread. View all comments

teh_maxh t1_j82rr2e wrote

Reply to comment by NiftyNumber in Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

> Information is encrypted before sending to Google ( I am assuming you are using chrome),

That's a new feature (only since June 2022), and AFAIK isn't automatically enabled.

2

Fickle-Razzmatazz827 t1_j85kajk wrote

Definitely not. It's been used way longer. No one sends plain text passwords since the late 2000s unless it's an amateur made website.

1

teh_maxh t1_j864onn wrote

I guess Google is made by amateurs, since on-device encryption was introduced just last year.

1

Fickle-Razzmatazz827 t1_j8729eg wrote

completely a different thing and this encrypts using your device and you need to enter your password to decrypt it. The password is still is not being sent to google as plain text and has never been.

1

teh_maxh t1_j87uadc wrote

Are you really arguing that "well, technically it's sent via TLS" is actually adequate for a password manager?

1