<story><title>Cracking encrypted LastPass vaults</title><url>https://markuta.com/cracking-lastpass-vaults/</url></story><parent_chain></parent_chain><comment><author>gchadwick</author><text>&amp;gt;I downloaded the popular rockyou.txt wordlist and put my actual vault master plaintext password inside&lt;p&gt;I was hoping for an exploration of how quickly one might crack a lastpass vault looking at different strength passwords and different iteration counts.&lt;p&gt;Instead the author has simply demonstrated that if you tell the cracking tool your password it can indeed crack it...&lt;p&gt;I guess you can at least follow what they did with your own vault without adding your password to the word list and see if it cracks quickly or not.</text></comment>
<story><title>Cracking encrypted LastPass vaults</title><url>https://markuta.com/cracking-lastpass-vaults/</url></story><parent_chain></parent_chain><comment><author>bedatadriven</author><text>&amp;gt; I downloaded the popular rockyou.txt wordlist and put my actual vault master plaintext password inside&lt;p&gt;Note that is NOT a demonstration of being able to crack an encrypted LastPass vault. The author&amp;#x27;s exercise wouldn&amp;#x27;t be feasible without prior knowledge of the master password, or choosing a master password that is present in a list of common passwords. That is consist with what we have heard from LastPass so far.</text></comment>