POLAND – 2022/02/01: In this photo illustration a LastPass logo seen displayed on a smartphone. (Photo Illustration by Mateusz Slodkowski/SOPA Images/LightRocket via Getty Images)
Today’s password managers let you remember only one master password, and then you can automatically fill in other passwords through their service. However, in the end, you still need to create a strong enough password first, otherwise even other passwords in the password library will be cracked. LastPass, which is actively following up on the FIDO Alliance’s password-free initiative, recently announced a new feature that allows users to access the stored password vault content without a password.
LastPass emphasizes that this is the first solution of its kind in the service, in which users obtain a one-time permission through the LastPass Authenticator mobile app instead of entering a master password. In this way, users can also reduce the chance of using the master password when logging in and inputting personal information on other web pages, and can directly use external authentication. In addition to using LastPass Authenticator, they also predict that in the future, passwordless technology will be extended to support biometric identification and hardware authentication keys.
Because a connected mobile phone has almost become an accessory that modern people carry around, it is also very suitable to be used as a password authentication tool. At the same time, because the number of uses is reduced, you can also increase the strength of the master password to strengthen the protection of personal information.