LastPass is brilliant!

Apologies for the res, but has anyone else's LastPass recently started displaying every single saved sight when clicking on the star to select your log on.

Used mine yesterday. It didn't do this, so I don't know. I use Firefox, if that matters.
 
Well then I dunno if something has updated to have caused this. Another colleague has the same issue, granted we both use Chrome and LastPass, so yarrr.
 
Well then I dunno if something has updated to have caused this. Another colleague has the same issue, granted we both use Chrome and LastPass, so yarrr.

Just tried it in chrome and yeah same thing firefox has no problem.
 
I do have another problem with Last Pass recently though. The site will be saved in my lastpass vault, but when I go to that website and click on the star, it won't give me the profile so that I can log in. I have to go to my lastpass vault and get the password manually.
 
Just an update for you guys using this...just be careful out there :)

Lastpass hacked?

meh. clickbait from MyBB. Actual facts are less dramatic :-P

https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

Was my master password exposed?
No, LastPass never has access to your master password. We use encryption and hashing algorithms of the highest standard to protect user data. We hash both the username and master password on the user’s computer with 5,000 rounds of PBKDF2-SHA256, a password strengthening algorithm. That creates a key, on which we perform another round of hashing, to generate the master password authentication hash. That is sent to the LastPass server so that we can perform an authentication check as the user is logging in. We then take that value, and use a salt (a random string per user) and do another 100,000 rounds of hashing, and compare that to what is in our database. In layman’s terms: Cracking our algorithms is extremely difficult, even for the strongest of computers.
 
meh. clickbait from MyBB. Actual facts are less dramatic :-P

https://blog.lastpass.com/2015/06/lastpass-security-notice.html/

Was my master password exposed?
No, LastPass never has access to your master password. We use encryption and hashing algorithms of the highest standard to protect user data. We hash both the username and master password on the user’s computer with 5,000 rounds of PBKDF2-SHA256, a password strengthening algorithm. That creates a key, on which we perform another round of hashing, to generate the master password authentication hash. That is sent to the LastPass server so that we can perform an authentication check as the user is logging in. We then take that value, and use a salt (a random string per user) and do another 100,000 rounds of hashing, and compare that to what is in our database. In layman’s terms: Cracking our algorithms is extremely difficult, even for the strongest of computers.

Yeah. When I logged in for the first time after the "hack", they just asked me to confirm my account by following a link in a verification email. No password changes were required.
Using LastPass is still one of the best decisions I ever made :)
 
Most important is this :
We are confident that our encryption measures are sufficient to protect the vast majority of users. LastPass strengthens the authentication hash with a random salt and 100,000 rounds of server-side PBKDF2-SHA256, in addition to the rounds performed client-side. This additional strengthening makes it difficult to attack the stolen hashes with any significant speed.
 
Yeah. When I logged in for the first time after the "hack", they just asked me to confirm my account by following a link in a verification email. No password changes were required.
Using LastPass is still one of the best decisions I ever made :)

absolutely agree. it has proven itself to be infinitely useful, especially when using multiple machines. love it!
 
Back
Top