7

I don’t like the way password managers work. Except LastPass.

Other password managers synchronize passwords and store them locally. Reason?

  • stealing of locally stored passwords from disk by malware

LastPass however:

  • fetches passwords directly from lastPass servers every time you want to login somewhere
  • if offline, you can’t browse webpages anyway so not being able to use passwords anyway.

I’ve once had an incident where malware simply stole browser’s password storage file from disk. Since then, I’ve relied on LastPass with 2-step authentication, making it prety much unstealable unless they actuall hack into their service in which case it doesn’t even matter.

I wonder if avast! will offer such online only option with their solution…