← Back to context

Comment by benjaminl

8 years ago

LastPass uses local encryption to enable LastPass to have Zero knowledge of users passwords. This means that user's passwords aren't passed in the clear even inside a TSL session.

So LastPass isn't the password manager mentioned in the post.

But the server might have sprayed out your login credentials while travelling through Cloudflare.