Is Last Pass - Password Manager

Is Last Pass - Password Manager - Safe ?

#1 RAPHelp

Member

Group: Members
Posts: 107
Joined: 08-October 08

Posted 31 December 2011 - 01:39 AM

Am currently using PassSafe (from SourceForge) ... but am looking for something I can use to access my passwords when not at home (retired - so work not a problem). Have seen good reports for Last Pass - a cloud based password manager ... but am reluctant to put my passwords on the Internet.

Any thoughts?

#2 BlackSpyder

Bleeping Big Rig

Group: BC Advisor
Posts: 2,369
Joined: 23-January 06
Gender:Male
Location:Huddleston, VA USA (Home Sweet Home)

Posted 31 December 2011 - 07:41 PM

I use Keypass with Portableapps.com. It loads to a USB drive that I can take anywhere, accessing the passwords requires a master password in case it is lost and encrypts the passwords is has saved/created (make a backup copy of the save file just in case, otherwise you'll lose the use of accounts which it had generated passwords for)

#3 NSILMike

New Member

Group: Members
Posts: 1
Joined: 22-December 11

Posted 02 January 2012 - 10:19 AM

RAPHelp, on 31 December 2011 - 01:39 AM, said:

You don't actually put your passwords on the internet, you put a highly encrypted and hashed version of them online. This is a highly secure way to store them...even lastpass cannot recover them for you. I am not familiar with PassSafe, so can't compare them. But LastPass is very highly rated, and if you create a strong master password for yourself, you should not worry about having your passwords hacked thru LastPass.

#4 Minh Triet Pham Tran

Member

Group: Malware Study Hall Sophomore
Posts: 97
Joined: 07-January 12
Gender:Male

Posted 07 January 2012 - 05:48 PM

RAPHelp, on 31 December 2011 - 01:39 AM, said:

The key to decrypt your passwords is not on the Internet.

Quote

Your encryption key is created from your email address and Master Password. Your Master Password is never sent to LastPass, only a one-way hash of your password when authenticating, which means that the components that make up your key remain local. This is why it is very important to remember your LastPass Master Password; we do not know it and without it your encrypted data is meaningless. LastPass also offers advanced security options that let you add more layers of protection.

How is LastPass Safe? « LastPass User Manual
http://helpdesk.lastpass.com/introduction/why-is-lastpass-safe/

LastPass - Safety
https://lastpass.com/safety.php

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology. — Bruce Schneier

#5 schnowzer08

New Member

Group: Members
Posts: 3
Joined: 07-January 12
Gender:Male

Posted 07 January 2012 - 08:25 PM

I enjoy last pass and know people who use it religiously. I have used it for about 3 years now and haven't experienced any problems, they even have Android and iPhone apps available. And if you want you can set it up to require a yubikey as an additional layer of authentication in order to access your "Last Pass Vault". I say give it a shot and try it out. Also check out this article it explains some of the 2 factor authentication available with Last Pass