{"id":10290,"date":"2023-01-15T15:43:41","date_gmt":"2023-01-15T15:43:41","guid":{"rendered":"https:\/\/fieldtrust.be\/?p=10290"},"modified":"2023-02-01T15:56:21","modified_gmt":"2023-02-01T15:56:21","slug":"migrating-from-lastpass-to-keeper","status":"publish","type":"post","link":"https:\/\/fieldtrust.be\/fr\/migrating-from-lastpass-to-keeper","title":{"rendered":"Migrating From LastPass to Keeper"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

LastPass\u00a0revealed<\/a>\u00a0that hackers stole customer vault data during an August 2022 incident. During the breach, the threat actor was able to copy a backup of customer vault data.<\/p>

According to\u00a0Ars Technica,<\/a>\u00a0LastPass vault secrets (logins and passwords) are encrypted, however, website URLs and other metadata are not encrypted. As a result, some stolen information could be used as targeted attacks against users. Information obtained from a source code leak and a Twilio data breach provided the attackers with information to break into the cloud infrastructure, which stored customer data.<\/p>

In contrast, Keeper adheres to the following:<\/p>

1. Keeper encrypts all vault data, including URLs and metadata, locally on the user\u2019s device. Keeper\u2019s cloud does not receive, store or process any plaintext vault information.<\/p>

2. Keeper does not store secrets such as cloud infrastructure access keys in its source code. We regularly scan source code for secret information.<\/p>

3. Keeper\u2019s source code, while privately held in Github Enterprise, does not provide information required to access a user\u2019s vault. The encryption of data occurs at the local device level, and much of this source code is published in our public Github repo as part of Keeper\u2019s Commander and Secrets Manager products.\u00a0<\/p>

4. Keeper does not use 3rd party providers such as Twilio for 2FA. Keeper\u2019s vendors have not been subject to any data breaches.<\/p>

5. Keeper does not provide any 3rd parties with management or access to any of our AWS data centers. All management of infrastructure is performed by full-time employees of Keeper Security who are additionally US Citizens located in the US.<\/p>

Keeper has the most security certifications in the industry. Keeper is SOC2 Certified,\u00a0FedRamp Authorized<\/a>,\u00a0StateRamp Authorized<\/a>\u00a0and ISO27001 certified.<\/p>

Here are a few resources if you have any questions about Keeper vs. LastPass:<\/p>