Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Just noticed on LastPass Pocket download and support pages, it's mentioned that

LastPass Portable is recommended over using LastPass Pocket.

However, no explanation is provided on any of those pages. I searched around, but couldn't find any appropriate explanation.

Is this because LastPass Pocket is

  1. not always in sync with the mother-ship
  2. not maintained / updated as aggressively as other alternatives
  3. it considered to be less secure by virtue of being a native app, or some other reason

Are there any risk / issues I need to be aware of before using this product?

share|improve this question

closed as not constructive by Dave M, Xavierjazz, 8088, wizlog, Nifle Feb 14 '13 at 20:00

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

    
Please note I'm interested into knowing if it's just a corporate policy to promote specific product or if there are any specific security issues with this product that one needs to be aware of? My intent is not to solicit speculative response. –  YetAnotherUser Feb 14 '13 at 20:30

1 Answer 1

From the lastpass site:

"LastPass Pocket is a stand-alone application (available for Windows, Mac OS X and Linux) that can be installed on a USB memory device, allowing you to carry your LastPass data around with you. Pocket essentially provides backup capability and offline access for your Vault, although we recommend LastPass Portable over Pocket."

Why? Because you are carrying the entire password that is encrypted with you on Pocket. I.E. If you lose this, some hacker could determine your key by brute force and since this is a safe full of passwords, you are now vulnerable.

On portable, passwords are still resident on the server, thus if you lose the USB you have this program on, you do not have to worry that you are losing a copy of your total password database.

Seems to make sense to me.

share|improve this answer
2  
Not sure if I agree - for one, offline access is available on any/all browser extensions. More over LastPass is based on premise that the level of encryption render brute forcing your master password impossible. –  YetAnotherUser Feb 14 '13 at 2:09

Not the answer you're looking for? Browse other questions tagged or ask your own question.