#Import pwsafe into last pass password

I'm not here to defend LastPass, but there are some rational answers to the questions you're asking, a lot of them having to do with human psychology.įirst thing's first, and yes I am 'victim blaming' when I say this: 60% of users reuse their passwords. I don't think we have a 'smoking gun' or a site/service/extension that is common to everyone who reported this thing happening to them. Neither have I, but I still believe it to be a plausible explanation. > I haven't seen any indication at this point that LastPass has been compromised at all. That is true, but there are so many reports now that it's really hard for me to believe they were all dumb enough to reuse their master passwords elsewhere and are also bullshitting us on HN. > 'However, users receiving these warnings have stated that their passwords are unique to LastPass and not used elsewhere.' That's really hard to verify. And if they don't know your passwords, how on earth do they know that you've reused them on a compromised service? Can they name that service? Has anyone yet found a service every affected user has in common? I haven't seen that.

#Import pwsafe into last pass password

They are claiming that the master password was used on some other (compromised) service, but they provide zero evidence for this. For everyone whose account was protected by blocking access from odd region, how many are there whose accounts were quietly accessed and no email was shot off to warn the owner? Immediate question: how the heck would they know which passwords are compromised, if it wasn't a compromise on their end? From the information provided, the only thing they have is the IP & geolocation data, which isn't going to be reliable when the attacker(s) are using VPNs.

> They stopped all usage of correct passwords they believed were compromised It's negative because something's up and they haven't given a good explanation. But so far, it seems like LastPass is doing its job, and I'd want to see more than this before jumping on the blame-LastPass bandwagon.) (To be clear, it's very possible I'm wrong and this message won't age well. I'm not saying I like LastPass (I use 1Password and find LastPass to be much worse), but I haven't seen any indication at this point that LastPass has been compromised at all. Since there only seems to be 2-3 reports of this, and they're self-reported and not cited, it doesn't seem like LastPass was compromised. I think most users would say that rather than admit they re-used passwords (or used similar passwords that were easy to reverse engineer). 'However, users receiving these warnings have stated that their passwords are unique to LastPass and not used elsewhere.' That's really hard to verify. Them warning users their master passwords are compromised is a good thing! Yet it's framed as though they're admitting to something. They stopped all usage of correct passwords they believed were compromised, which is exactly what I'd want them to do in this situation.

Delete the PasswordExport.xml file, then permanently delete it from the Recycle Bin.This is framed so negatively toward LastPass, which is unfortunate.

Verify that the passwords were imported properly.

When it is complete it will show a pop-up saying it is complete, click on GO TO MY VAULT.

Verify they look good and are what you want, then click on either IMPORT SELECTED or IMPORT ALL, depending if you are importing a subset of the passwords, or all of the passwords.

The next screen will show you the names and usernames you will be importing into LastPass.

Right mouse click where it says 'Paste your content here.' and choose paste from the menu.

Click on the down arrow under source, and choose KeePass.

Click on More Options, then Advanced, then Import.

Log into LastPass in your web browser, for example Chrome, FireFox, or Internet Explorer.

Click on edit again, then click on copy.

All of the text should now be highlighted.

This will open the file in Notepad, click on edit, then click on select all.

Right mouse click on the file and then choose open with and choose Notepad from the menu, then left click on Notepad. Open File Explorer and navigate to the location where you saved the xml file.Verify that the file is being saved where you would like it to go, then click OK.WARNING: This is a human readable version of your password database, protect it with extra care. Click Save when you have the file name and folder location selected. We suggest passwordexport.xml and save it to your Documents Folder, but you can choose any name and any location. Choose a location and a file name for the export.Choose the fifth option, KeePass XML (2.x).Open KeePass and unlock your KeyPass database.