0

Unfortunately my iPad was recently stolen and I had LastPass installed on it. Both the iPad and the app are protected with TouchID and passcodes. However, LastPass keeps an encrypted offline cache of the passwords and other stuff including secure notes for bank accounts and cards, etc. I understand that it should be very unlikely for someone to get through TouchID and the master password for the app. Just in case, I can go ahead and change the password for all the critical websites, but I can't change anything about the bank accounts and other secure notes already in there. Should I be worried about someone getting the vault decrypted? I'm assuming the everyday petty thief wouldn't go through all that but some advice could still be helpful.

Improve this question
3
  • You answered your own question, unfortunately. It is unlikely that someone could break through the protections. It is unlikely that the average thief would go through all that work to try. But it's possible. I know you want some certainty, but we'd be guessing.
    – schroeder ♦
    Commented Apr 19, 2020 at 8:28
  • Did you set up your iPad with "Find My Phone"? You could remotely wipe it.
    – schroeder ♦
    Commented Apr 19, 2020 at 8:29
  • @schroeder Yeah, I have that set-up, but it's a wifi only model and they can't connect to any wifi network unless they can unlock it first. Kind of a chicken and egg situation..
    – Paghillect
    Commented Apr 19, 2020 at 20:48

1 Answer 1

Reset to default
-1

LastPass promises to that your password database can only be decrypted if the attacker knows your master password. So if you trust LastPass, you don't have anything to worry about.

However, given that LastPass is closed-source software, there is no way to actually verify this promise, and hence the security is based upon your trust in the company.

Still, given that you trusted the company enough to become a paying customer, there is no need to change any of your passwords. They simply cannot be uncovered without knowing the master password.

Improve this answer
1
  • I'm not sure you're understanding the question. The asker is concerned about the password cache stored locally on the iPad which is used in the case where the master password is lost. Answering the question would entail knowing how to go about attacking this locally stored password cache and the feasibility of that.
    – Steve Sether
    Commented Jun 22, 2020 at 20:18

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .