Password management app 'LastPass' is accused of 'intentionally introducing a bug to force a paid plan contract with a password as a hostage'



In 'LastPass ' with password management and generation functions, problems such as 'access to the export function is restricted in the free plan' and 'there is a bug that makes it impossible to export passwords' were reported, and 'LastPass' was reported. Is holding the user's password hostage in order to sign up for a paid plan. '

LastPass is holding people's data hostage and it is an absolute disgrace that needs to stop: software
https://www.reddit.com/r/software/comments/s053t3/lastpass_is_holding_peoples_data_hostage_and_it/

LastPass has gained popularity as an app that can use powerful password management and generation functions even in the free plan, but the plan revision in February 2021 limits the users of the free plan to one device that can be used simultaneously. , Device switching was also limited to 3 times. Since the ability to export passwords managed by LastPass is only available on the desktop version of LastPass , this increased restriction limits the number of times free users of the smartphone version of LastPass can export their passwords. rice field.

A restriction has been added to the free version of the popular password management application 'LastPass' so that it can only be used from either a smartphone or a PC --GIGAZINE



Also, according to reddit user nametaken_thisonetoo , the password export function of the desktop version of LastPass had a bug from the same time as the above-mentioned tightening of restrictions, and it was impossible to export. nametaken_thisonetoo contacted LastPass about this, but the lead to the contact point was very complicated and there was no sign that the problem would be resolved months after the inquiry.

nametaken_thisonetoo speculates that 'the bug is intentional' because the above bug is also present in different browser extensions, Firefox and Google Chrome. In addition, based on the fact that LastPass's paid plan includes a service called 'Priority tech support,' 'All of these situations are ridiculous prices for as many people as possible. LastPass's paid plan. It's designed to sign up for. Password access is important to everyone on the Internet, and it's unacceptable for a company to take a password hostage. ' Is unfolding.



A lot of support was gathered for nametaken_thisonetoo's opinion, and the app comparison service AlternativeTo said, 'If the password export impossible state in LastPass is intentional,'the right to receive data in a machine-readable state'' Violates Article 20 of the EU General Data Protection Regulation (GDPR), which may impose a fine of up to 20 million euros or up to 4% of total sales in the previous fiscal year. There is also a post.

After that, LastPass responded, and namedtaken_thisonetoo was able to successfully export the password. However, namedtaken_thisonetoo said, 'It's best not to touch LastPass under any circumstances, ' revealing the move from LastPass to 'Bitwarden.'

In addition, the following article explains in detail how to actually transfer the password from LastPass to Bitwarden.

How to move from the popular password management service 'LastPass' with limited functions to 'Bitwarden' --GIGAZINE



in Software,   Security, Posted by log1o_hf