This time it sent me an email, which I had to click a link. I re-did the CSV export under Advanced Options. Now the URL started with the Lastpass URL. So next, I tried going to LastPass homepage and signing in. This suggested it wasn't hitting the main Lastpass site.
I noticed that when I used "Open Vault" from the Lastpass firefox extension, that my URL was prefixed with (moz-extension://.). I tried the export again, but still same issue! I logged out of Lastpass for Firefox and logged back in. I had a hypothesis now that this might have to do with some local caching and maybe a bug in the Firefox extension (another Lastpass security issue?!). I obviously don't want to have 8000 records with tons of duplicates. But this was still a major problem as I needed to get a clean CSV export to import into my new tool. This, at least, explained why my old logins/notes were still in the CSV. I had about 8K records in the latest CSV (way more than there should have been!). It was at this point I realized that it was simply appending the new exports on top of the prior ones. But having downloading like 6 CSVs to my downloads folder, I noticed the file size was getting bigger each time. They old logins/notes were still there!Īt this point, I was getting very concerned. This was obviously very concerning! Next, I went to my recently deleted (also under Advanced Options).
When I ran the export again, I noticed that some of the passwords I had just deleted were still in there. I wanted to clean things up a bit before migrating to my new tool.
I then went in and deleted about 100 old logins/notes I didn't need. This immediately downloaded a plain-text CSV. To start, I first went to Advanced Options -> Export. Unfortunately, I've learned of even more bugs/issues with Lastpass's export feature as I've gone through the process. In light of the recent news with Lastpass's major security breach, I'm greatly concerned (probably like many of you) and looking to migrate away. If you do it from Firefox extension or Mac app, it appends each time you run it (so even passwords you already deleted are still included.) On web (signing via Lastpass homepage), it yields only partial results.
TLDR: The Lastpass export function doesn't work reliably.
0 kommentar(er)
