Feb 8, 2011

PC Mag Says LastPass Is "Still the Best"!

Neil Rubenking, Lead Analyst for Security at PCMag, recently published an in-depth review of LastPass and selected us as PC Mag's Editors' Choice for password management!

Rubenking evaluated both our free and Premium products, citing our portability and comprehensive security amongst our greatest features.

When comparing free and Premium, Rubenking comments, "You don't have to pay a penny to get extremely comprehensive and flexible password management from LastPass. The free edition does just about everything you could ask. By spending a dollar a month for the Premium edition, you extend the product's security and scope. Specifically, you gain multi-factor authentication, additional platforms, and useful ancillary programs. Choose either one; both merit recognition as PCMag's Editors' Choice."

We're proud of the five stars we received for both versions of LastPass! We hope to continue providing quality products for our one million users and counting.


  1. Congratulations to you. Keep up with what you've been doing. Will become a premium member soon. Thanks.

  2. Kudos guys, lastpass is one of best product and it deserves 5 star rating

  3. You deserve it! I've been using the free version up until now, but now that I've got an Android phone I'll probably upgrade to a premium account (trial version is about to run out).

  4. Not surprised. Purchased both premium Xmarks and Last Pass...truly the best value add web service I have ever paid for...beyond my internet connection :-)

    Kudos to the LastPass team!

  5. I have used LastPass ever since reading about it in PC Magazine. Simply amazed with the ease of use, management of all passwords & form filling. Have never come across such
    a wonderful piece of Free Software.

  6. I see a lot of praise for LastPass. I am sure it deserves the praise for ease of use. But I see nothing answering the obvious question concerning how secure it really is: what does it do with the Master Password? Is it stored somewhere on the machine's disk or on a LastPass server? Or does LastPass store only a cryptographic hash of the Master Password? If the latter, what hash function does it use?

    I cannot consider a password manager truly secure if it stores the Master Password anywhere. It must use a secure hash function. This means it can no longer use SHA-1, for example.

  7. @Indicator Veritatis

    I don't think you understand how LastPass is working...

    LastPass does not save your password anywhere. It only stores your AES encrypted tresor in their cloud and they have a login database with your username and the hash of your password.

    The de- and encryption is done on your host computer. Even if LastPass would use a weak hashfunction, but with a salt, it's not possible to encrypt your AES encrypted tresor.

    SHA-1 is "weak", but it's not possible to find the hashed password, since it's a strictly one-way algorithm. It's only possible to find, with a lot of bruteforcing (2^63), a hash collision, which gives you a password, that produces the same SHA-1 hash. But with that, it's not possible to encrypt your AES tresor.

    Hopefully that clears your doubts.

  8. @Indicator Veritatis -- we use SHA256 actually, and multiple rounds. We'd recommend listening to Steve Gibson's review which has a lot of details: http://twit.tv/sn256

  9. Excellent product. I'm very happy I switched over to LastPass. Won't even admit to the system I was using before.

    For those concerned about security (as I was) the review by Steve Gibson (http://twit.tv/sn256 ) put my mind at ease and finally convinced me to give it a try.

  10. Congratulations for your work on LastPass. Being an "internet junkie", I can't imagine functioning properly were I to go back to manage my passwords on my own.

    Another tool that's essential for me is online bookmarking. Thumbs up for your acquisition of XMarks/Foxmarks. I'm not using the latter yet though, because it lacks a good tags management system, like the one provided by Delicious. But I'm confident you'll fill that gap soon (already in the tubes as suggested by this feature request ?), so that I, and possibly many in the same situation, am able to move my stuff from Delicious to XMarks.

    Thanks again for the service.