3

How does the "emergency access" feature of LastPass work? I can't find detailed information about the used cryptographic methods.

How can I be sure that LastPass is not keeping a copy of my master-password to decrypt the files in case of an emergency access request?

Improve this question
1

1 Answer 1

Reset to default
5

While the strict answer to the question can be found in the LastPass Help Centre, what is interesting on the info they provide is that by enabling it you make your account as secure as the master password of the relying party (on a threath model where the attacker has access to encrypted data like lastpass has).

If you have a strong one, but the other person uses a weak one, the attacker (or lastpass) could get into your passwords.

Improve this answer
2
  • Exactly that. And why the Emergency Access contact can't use his private key without authorization from lastpass and decrypt the key, and so the files, sooner that allowed?
    – amprantino
    Commented Jan 7, 2016 at 14:59
  • The trusted contact does not have access to the encrypted key before they provide it. The security is that they wont provide it and probably put a good effort on avoiding anyone has access to it before the date too. That is, of course, a potential security problem.
    – CristianTM
    Commented Jan 7, 2016 at 15:21

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .