On: LastPass user vaults stolen in recent hack

[TechBro8615]

Why are the sites where you have accounts not part of your encrypted vault?

Can someone confirm my understanding that 1Password does in fact encrypt the entire vault, including the URL/domain associated with each login?

[hn_throwaway_99 → TechBro8615]

No, as stated, they don't encrypt the URL. This is likely so that, regardless of what you have entered for your "when is master password required" settings, the browser plugin can highlight when it knows that you've entered a password for a site.

[wlonkly → hn_throwaway_99]

Was your answer about what LastPass does, or what 1Password does? The person you replied to was asking about 1Password.