You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I replied via email but I think it got lost. What's the attack model here? I think any encryption we do here would not add real security since a user that can connect to the agent to export can see your passwords anyway.
You can use "lpass export | gpg" to encrypt at rest, and you can set any password to reprompt through the web ui to force MPW reprompt before export dumps the plaintext, to prevent casual drive-by snooping.
as instead plain text. We need more safety. Anyone can read our passwords now. AES256 should be fine.
The text was updated successfully, but these errors were encountered: