I am a web developer, not a security expert, but I know a little bit about security because I need it as a web developer.
According to LastPass,
LastPass encrypts your Vault before it goes to the server using 256-bit AES encryption. Since the Vault is already encrypted before it leaves your computer and reaches the LastPass server, not even LastPass employees can see your sensitive data!
As I understand it simply means that LastPass employees cannot see password by using any method. So how we can find our passwords which are saved on their servers (encrypted password)? I mean if their program can show passwords for us, why employees can't use the same method to decrypt our passwords which are stored in their servers?
Or do I misunderstand some point?