LastPass puts you in control of your online life – making it easy to keep your critical information safe and secure so you can access it whenever you want, wherever you are. “LastPass, an award-winning password manager, saves your passwords and gives you secure access from every computer and mobile device. So by getting the keys to the kingdom at LastPass, the hackers may have gotten the keys to the kingdom of millions of users as well.Ĭhrome’s blurb for this browser add-on gives some idea of the risks users face. It wasn't that long ago when I'd mention this and people would argue that HTTPS = encrypted = unbreakable.LastPass is a program that allows you to store multiple passwords in a single account accessed by a single password. I avoid doing anything personal on my employer's network or devices for exactly this reason.ĮDIT: I just read the other comments, and it makes me happy to see that people are finally realizing that HTTPS inspection exists. The bottom line is that you should assume your employer sees all your traffic. This depends on what that software is and how they're using it. Keep in mind that if you have any of their endpoint protection or remote access software installed on your device, it is conceivable that they installed their own certificate. If you're using your own device, and they have not installed a certificate on there, then it's unlikely they would be able to successfully intercept the encrypted traffic to Bitwarden. We don't let employees use private devices to connect to our network, and this is one of the reasons why (we have no way to push our certificate to your device without your assistance). This requires us to install our own certificate on your browser. That's on top of the other security measures we have that log your activity. This allows us to view your encrypted browsing traffic in real time.

We use HTTPS inspection, which is basically a sanctioned man-in-the-middle attack.

My lastpass vault