Problems with LastPass Password Manager.

[JayCeeDee]

There are problems at the moment following the release of a bug fix following a vulnerability.

Problems HERE . Details of Vulnerability HERE .

Currently I can access LastPass on the browser extension that has been updated to version 4.33.0, but all the auto launch features ( that made it so great to use ) have disappeared, so it’s multiple copy and paste time!!!

Haven’t tried the app, not really that up to speed with it yet.

[Ed P]

I must confess I have always worried about a Cloud-based application that stored ALL your passwords. It sounded too much like a disaster waiting to happen. Just one slip-up by LastPass and bang goes your security. On a scale of one to ten this specific incident only ranks a six, but the numbers of bits of malware that couple together multiple different insecurities seems to be growing.

I personally use an open source off-line password manager such as the ones on this list.

[Bob Williams]

All my passwords are saved twice: initially by Firefox, which I can access and find via Tools – Options – etc, and always recorded in an A5 folder, the pages of which I set up as a small programme using OpenOffice. I can delete, renew, insert new and print new pages whenever I wish. The A5 folder is of course stored away safely in a hideaway. I have the same misgivings about Lastpass and other such programmes, as Ed.

When the Thought Police arrive at your door, think -
I'm out.

[JayCeeDee]

LastPass have just got back to me with the following, which I have followed and it’s functioning properly again.

 

Hello John,

Thank you for contacting LastPass Support, and hope you’re having a great day apart from this concern! We apologize for any inconvenience this may have caused you.

Please try fully uninstalling LastPass using the directions at http://helpdesk.lastpass.com/uninstalling-deleting-lastpass/ . Then try reinstalling using this direct download link: https://lastpass.com/dl (use the appropriate link from https://lastpass.com/misc_download.php for Safari, and Linux browser versions). Let us know if you the behavior remains. If so, please go to https://lastpass.com/debug.php and follow the debug version for [browser they are having trouble with], and then send us the log.

 

Hope that helps anybody having problems.

Bob, I also have an A5 book ( A – Z  phone number style ) that has all my login and passwords.

 

Ed, I had reservations similar to yours initially, however, reading the following gave me confidence.

 

Strong encryption algorithms.
We’ve implemented AES-256 bit encryption with PBKDF2 SHA-256 and salted hashes to ensure complete security in the cloud. You’ll create a password manager account with an email address and a strong master password to locally-generate a unique encryption key.

 

Local-only encryption.
Your data is encrypted and decrypted at the device level. Data stored in your vault is kept secret, even from LastPass. Your master password, and the keys used to encrypt and decrypt data, are never sent to LastPass’ servers, and are never accessible by LastPass.

If LastPass cannot decrypt the information, then nobody else should. Providing your Master Password is of sufficient strength it should suffice.

 

[Ed P]

I’m not firing bullets at LastPass’ security, but rather the cloud storage concept as any web-based store of all your passwords could well be a target for web-based exploits such as man-in-the-middle attacks.

Your browser is probably the biggest source of insecurity especially when coupled with someone doing a spear-phishing attack. The latter is probably not specifically a worry for you, but it could be for others if they handle sensitive information.

[Bob Williams]

JayCeeDee: I should have said that I made my own A5 book. It started as an A to Z WHS book and got so badly scribbled over that it became illegible in parts, as I change some passwords regularly. So I used Open Office to make my own template of A5 pages (actually A4 pages, split horizontally) and bought a cheap plastic A5 ring binder. A to Z is set up as individual text boxes and I just retype one page, print and change it in the folder. A lot of work to start with, but once the system is working, it’s easy to keep it up.

When the Thought Police arrive at your door, think -
I'm out.

[JayCeeDee]

Bob Williams wrote:

JayCeeDee: I should have said that I made my own A5 book. It started as an A to Z WHS book and got so badly scribbled over that it became illegible in parts, as I change some passwords regularly. So I used Open Office to make my own template of A5 pages (actually A4 pages, split horizontally) and bought a cheap plastic A5 ring binder. A to Z is set up as individual text boxes and I just retype one page, print and change it in the folder. A lot of work to start with, but once the system is working, it’s easy to keep it up.

Nice one.👍 Obviously a combination from your print job and a tidy mind!! Or if you’re like me, a tad OCD!!😀

[Author]

Posts