Hacking a popular password manager on Mac and iOS

This is chilling news: according to an official press release fromLastPass, its customer data was compromised this summer. We thus learned, through the CEO himself, that hackers managed to enter the company's system via a development environment to steal confidential information. The good news is that these are of course encrypted and it will take time to decrypt them. Furthermore, the publisher ensures thatif the users' master password is strong enough, the danger is less.

Despite everything, as noted by our colleagues fromPresse-citron.netInan analysis published today, we note a certain “reserve” not to be neglected in these cases. In fact, it is “impossible to say with certainty that the data stolen by hackers is actually as encryption-secure as the company says“. So all we have to do is cross our fingers that the company is telling the truth. Otherwise, possible legal action would be justified against him.

A fading guarantee of security

This mishap is quite damaging forLastPass, which touts its service as a “effortless security from anywhere” as the title of its French home page. What's more, you should know that its clients include heavyweights such as Harvard University, Patagonia and Yelp.

LastPass is not only intended for professionals, however, since the platform also offers a completely free subscription for individuals. It is possible to save unlimited passwords, but not to access them from any device. However, the app is available on most mainstream operating systems such as the Google Play Store (Android),App Store(Apple) or Windows and Linux.

Your password manager from Apple?

In the meantime, you can always trust theTrousseau iCloudoffered by Apple on Macs, iPads and iPhones. The features are not as advanced, but security vulnerabilities seem to be rarer.

TheTrousseau iCloudis complementary with another solution from Cupertino calledaccess codesand which aims to replace passwords with one-time codes. To find out more, the developerdetailed the principle point by pointin order to reassure the most skeptical. The initiative would even prove more secure than two-factor authentication.

i-nfo.fr - Official iPhon.fr app

By : Keleops AG