
We utilize an industry-standard zero-knowledge architecture that ensures LastPass can never know or gain access to our customers’ master passwords,” LastPass said.

“We never store or have knowledge of your master password.

Nor were master passwords compromised, according to an FAQ provided by the company. Toubba assured customers that an investigation was initiated immediately after unusual activity was detected and found “no evidence that this incident involved any access to customer data or encrypted password vaults.” The breach occurred within the company’s development environment and its zero-knowledge model allows only a customer to have access to data in the decrypt vault.
