I didn’t know LastPass let you set the number of iterations your passwords are encrypted with. Most customers are fleeing to other hosts, but I don’t know if those other hosts offer this feature. I don’t personally use these things, but I would stick with LastPass unless someone else lets you set iterations. As the article says, if you set that number high enough your passwords are not in danger.
The other thing these algorithms can do—on top of making it computationally expensive to make password attempts—is make it cost a lot of memory. If it’s only computationally expensive an attacker can have one large GPU do hundreds or thousands of attempts at a time. If it also costs 1 GB of RAM to make a password attempt you will need a lot more hardware to brute force crack a password.
The Linux disk encryption algorithms let you set both the time and RAM cost of decryption. I don’t know of any others that do it though.
(post is archived)