Hacker News Reader

req: lastpass's response

Could you link to it please?

LastPass has not made a direct statement. On their forums, however, a customer asked where data was hosted and this post was made by the CEO:

LastPass is "host proof" hosted meaning that your sensitive data is encrypted with a key we at LastPass NEVER have, removing many of the concerns PRISM raises with most cloud service providers. LastPass can't be forced to give the encryption key to your data as it has never hit our servers!

https://forums.lastpass.com/viewtopic.php?f=12&t=89195

They could release a new binary that does register encryption keys, and you would never know it. They could even lie (not that I mean they do it, but if you need security, it can't be from a closed source application).

Reply on news.ycombinator.com