LastPass vulnerabilities challenge online password managers

0 586 2 minutes of reading

This morning the news broke. LastPass, one of the most used password managers on the internet , had two serious bugs that allowed anyone to steal user passwords relatively easily . Fortunately, the holes were quickly corrected and, in principle, no one was injured. In this little crisis, LastPass has acted very professionally, but that doesn't stop the debate over how best to save passwords from being brought back to the table.

Our colleagues from RedesZone reported this morning the controversy that arose after the discovery of two major bugs in LastPass, one of the most famous online password managers on the Internet. Millions of people trust it to, with a master password, keep all the passwords for all the services to which they subscribe.

In principle, this had always been a really safe solution. However, two bugs found in LastPass cast doubt on this claim So much so that it is possible to wonder, not if it is safe to trust LastPass, but online password managers.

LastPass is not the problem

The reality is that LastPas managed to fix the holes quickly, and the problem didn't get worse. Looking at it this way, it's safe to say that entrusting our security to an online password manager, at least LastPass, is relatively acceptable. However, we do not entrust our security to a company, but also to a network of networks like the Internet in which anything can be hacked. This is a problem because no matter how secure LastPass is, and no matter how seriously it takes its job, our passwords will never be 100% secure in an online manager because, by definition, being online prevents you from being completely sure.

The solution is a password manager local like KeePass . With it, open source, passwords will be managed by us on our computer, without anyone from the outside being able to access them. Obviously, this prevents us from being able to share passwords with other devices, unless we connect it to a cloud storage service, with which we would already convert what is local online.

What do you think? Do you trust online password managers? What methods do you use?

This might interest you ...