On: LastPass user vaults stolen in recent hack

[bawolff]

The relavent part is what KDF they use on the master password.

Afaict They use pbkdf-sha256, with 100k rounds. which is not bad, but i think a memory hard function like argon2 would be much much better.

So its not terrible, but its not amazing either