nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How is data stored and synced

subscriptions

Just want to get my head around how the app works in the background. If I have the desktop app and also on my phone and iPad. Are all my passwords stored together centrally in the cloud or just stored and synced between devices (so they are the only places the entire password set is stored). Do I need to keep local backups of the app or, if say I lose my phone or laptop, can the password store be rebuilt from remaining devices?

Find more posts tagged with

Accepted answers

rachael.orovets

Hi @Rustyy,

Yes,User data input via the LastPass web or mobile application is encrypted with the user’s unique key on their device and the AES-256 encrypted data is synced to LastPass cloud servers for secure storage. The user can access and decrypt their data on demand with their master password – which occurs entirely at the user and device-level. This means when you log in to your LastPass Vault on a new browser or device your encrypted data is synced from the cloud then un-encrypted and shown onyour device.

All comments

rachael.orovets

Hi @Rustyy,

We’ve implemented AES-256 bit encryption with PBKDF2 SHA-256 and salted hashes to ensure complete security in the cloud. Your Vault data is encrypted and decrypted at the device level. Data stored in your vault is kept secret, even from LastPass. Your master password, and the keys used to encrypt and decrypt data, are never sent to LastPass’ servers, and are never accessible by LastPass.

For more detailedinformation aboutLastPass' security controls please see the SPOC report here:https://logmeincdn.azureedge.net/legal/LastPass-SPOC.pdf

subscriptions

That's interesting info but my question isn't security related. I was interested in knowing where the vault is stored. I see that I can log in to the vault on a web browser so I'm assuming that links to my vault in the cloud?

subscriptions

OK thanks for that, a bit clearer.

rachael.orovets

Hi @Rustyy,

Yes,User data input via the LastPass web or mobile application is encrypted with the user’s unique key on their device and the AES-256 encrypted data is synced to LastPass cloud servers for secure storage. The user can access and decrypt their data on demand with their master password – which occurs entirely at the user and device-level. This means when you log in to your LastPass Vault on a new browser or device your encrypted data is synced from the cloud then un-encrypted and shown onyour device.