[lokedhs]

With a salt and enough iterations of PBKDF-2, even easy passwords should be reasonably difficult to crack.

The problem of course is deciding what a reasonable number of iterations is, but given the time it takes to decrypt my password I'd say they use quite a lot.

[maibus2]

"Should" is the key word there. When Last Pass was breached in 2015, they were using only 5k iterations of PBKDF-2 to create the encryption key (but it was changed to ~100k in Feb 2018) [1].

[1] https://palant.de/2018/07/09/is-your-lastpass-data-really-sa...