0

This question already has an answer here:

Here is description how does it works. It is open source solution which generate the password by login, site and master password.

It looks like "one password for all sites". Is it right? In general, person have one login for all sites. In this case we have only one unknown input parameter - master password and it is the same for all sites.

If one of my passwords will be stolen, the intruder will be able to restore my master password (from site, login, password and open-source function) and then get my passwords for all the sites.

Am I right ?

marked as duplicate by Community Dec 15 '16 at 17:29

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • Firstly, if an attacker obtains your master password for any classical passwords safe he automatically gets all your passwords (in that safe). Secondly, If one of my passwords will be stolen, the intruder will be able to restore my master password (from site, login, password and open-source function) is not necessarily true (there are certain one-way functions). – Cthulhu Dec 15 '16 at 17:25
  • This has been marked duplicate, but let me mention that with 2FA enabled, stealing your password doesn't mean very much. Also, pay Lastpass to become a full member and they will do whatever it takes to help you. They're a great company. And, of course, export all your passwords to make sure you can still operate even in the unlikely event that Lastpass goes away. – SDsolar Dec 15 '16 at 17:33
  • Dear @Community, I see you marked this as duplicate yet you did not provide a link to the original. – SDsolar Dec 15 '16 at 17:34
  • @SDsolar, I have asked about LessPass, not LastPass – demas Dec 15 '16 at 17:53
  • Ah, Senior eyes. I have been a Lastpass user for several years so that's what I know about. – SDsolar Dec 15 '16 at 20:39

Browse other questions tagged or ask your own question.