Hacker News new | ask | show | jobs
by Sebb767 1638 days ago
> Storing the encrypted database in the cloud and downloading it is the same as storing it locally if the decryption protocol is performed locally.

The problem is that, with web-based password managers, you are not only downloading the database, but also the code to decrypt it. A locally installed Keypass requires your PC to be compromised, whereas for LastPass it is sufficient for their servers to be compromised (while not avoiding the problem if you are compromised, either).