Post
Topic
Board Service Announcements
Re: [ANN] CLOUDMINR
by
Deathwing
on 02/08/2015, 16:30:21 UTC
is it really safe to use last pass?
isnt it like using an online application to manage your password?
what if last pass account got hacked?  Grin

They use a good encryption, at least that is what I've heard.

Quote from: LastPass
LastPass never has access to your master password. We use encryption and hashing algorithms of the highest standard to protect user data. We hash both the username and master password on the user’s computer with 5,000 rounds of PBKDF2-SHA256, a password strengthening algorithm. That creates a key, on which we perform another round of hashing, to generate the master password authentication hash. That is sent to the LastPass server so that we can perform an authentication check as the user is logging in. We then take that value, and use a salt (a random string per user) and do another 100,000 rounds of hashing, and compare that to what is in our database. In layman’s terms: Cracking our algorithms is extremely difficult, even for the strongest of computers.