0

Here is description how does it works. It is open source solution which generate the password by login, site and master password.

It looks like "one password for all sites". Is it right? In general, person have one login for all sites. In this case we have only one unknown input parameter - master password and it is the same for all sites.

If one of my passwords will be stolen, the intruder will be able to restore my master password (from site, login, password and open-source function) and then get my passwords for all the sites.

Am I right ?

6
  • Firstly, if an attacker obtains your master password for any classical passwords safe he automatically gets all your passwords (in that safe). Secondly, If one of my passwords will be stolen, the intruder will be able to restore my master password (from site, login, password and open-source function) is not necessarily true (there are certain one-way functions).
    – Cthulhu
    Commented Dec 15, 2016 at 17:25
  • This has been marked duplicate, but let me mention that with 2FA enabled, stealing your password doesn't mean very much. Also, pay Lastpass to become a full member and they will do whatever it takes to help you. They're a great company. And, of course, export all your passwords to make sure you can still operate even in the unlikely event that Lastpass goes away.
    – SDsolar
    Commented Dec 15, 2016 at 17:33
  • Dear @Community, I see you marked this as duplicate yet you did not provide a link to the original.
    – SDsolar
    Commented Dec 15, 2016 at 17:34
  • @SDsolar, I have asked about LessPass, not LastPass
    – ceth
    Commented Dec 15, 2016 at 17:53
  • Ah, Senior eyes. I have been a Lastpass user for several years so that's what I know about.
    – SDsolar
    Commented Dec 15, 2016 at 20:39

0

Browse other questions tagged .