[junon]

> What are they doing that you can't do?

I highly doubt your engineer is doing proper cryptographic handling of data like they do.

[8organicbits]

LastPass hasn't been doing proper cryptography, so that part may be a fair bet.

If you use Django's default hasher, for example, you get more hashing rounds in the default config and they increase those periodically (the latter part that LastPass is struggling with, per the article).

https://github.com/django/django/blob/650ce967825aa192222391...