Ignoramus5243 wrote:

Did you read about the gawker password theft, hackers stole millions
of unencrypted passwords. Those people did not even bother to encrypt them.


I read about it. Some people use really lame passwords and then use them everywhere. One
of the reasons lastpass appeals to me is it generates a unique password for each site then
saves it in an encrypted database with an encrypted copy on the lastpass server(s).

Lastpass hosts only encrypted files that they don't have the encrytion keys to so when I
use another computer or run firefox off my usb key, it can sync the local copies of the
database after I authenticate locally. Obviously I have to trust them not to try to slurp
my database password but then you have to trust something eventually.

Wes