Viewing a single comment thread. View all comments

[deleted] t1_j84lawy wrote

Reply to comment by guatemaleco in Millions of passwords stolen from LastPass earlier than company disclosed: Report by BasedSweet

[deleted]

0

belteshazzar_der t1_j85klag wrote

This is incorrect. They stole the password vaults themselves, so if they crack your master password they'll get access to all of your passwords. Doesn't matter if you have 2FA on. This is one of the main reasons why this breach was so bad.

10

guatemaleco t1_j8gt399 wrote

Yea, 2FA is not used in encryption at all. It's only part of authentication to retrieve the encrypted vault. Since the vaults were already stolen, 2FA is meaningless here.

1