Maybe I only give it 20%, but I'm not totally convinced that some of the uproar isn't a lot of security nerds that know the best practices from the compsci but don't know the risk calculation from the math/econ side. I'm still taking bets that we don't hear about ANY vault breaches in the next year. (If a vault takes 1 month to crack using all resources (probably very optimistic estimate), then 1000 vaults (w/ same hashing/password complexity) will take 1000 months to crack there will be lots of simple-password to crack, so they would probably invest hours per vault for 1000s (milloins?) of vaults and see what they get, then maybe expand from there all to try and spearfish or find some bank accounts that are 2-factor guarded). Grosney/1Password could be right at how bad they designed things and it STILL be the case that 90% of vaults are not breached because as they said $100 for each vault taking weeks to breach EVEN for those that used chained dictionary words or phoenitic replacements ends up being not worth it or harder for the thousands (millions?) of vaults they scored if they're going to get a bunch of passwords for comment boards, low-value websites (90% of my stuff is low-value logins) and most of the rest has 2-factor protections (banks etc) or will have had their passwords changed.Maybe my vault wasn't copied? A generous reading of the LastPass statment to date suggests that not ALL vaults have been access by the threat actor ('some storage volumes').So I'm relying on a few remaining roadblocks to the hackers: I was big on them long ago, but the founders are long gone and no one seems to care or know what they're doing now. I agree that Lastpass seems to be a shell of what it used to be.

Is lastpass safe reddit