Viewing a single comment thread. View all comments

Gaspar099 t1_j1i5zxy wrote

Reply to comment by wren337 in The Lastpass hack was worse than the company first reported by glawgii

The thing that make me question is:How they can reset your Master Password if your data is encrypted? I lost my master password in the past and I was able to change it. Meaning they probably have a backdoor in there cryptographic system or a way to get the information on their side.

8

raunchyfartbomb t1_j1io28h wrote

Yea, this is a point to think on. The only thing I can think of is that it exists locally with much less security. But that doesn’t make sense, so they must have some way to decrypt it in order to apply the new password to the blob.

3

Gaspar099 t1_j1iob6i wrote

Maybe a copy of vault with another key they have.

1