LastPass users get TOR blocking security feature
LastPass has added two new security features to its popular online password management system; access via TOR (The Onion Router) has been disabled and users can now limit logins to specific countries.
Premium users of the system can already enable two-factor authentication (or limit access to specific computers) as well as increase SHA-256 iterations to confuse brute-forcing of passwords but the company hopes that outlawing access via the anonymising TOR system will cut off another avenue of attack.
“Because TOR has been associated with hackers who employ it to stay anonymous, and since the majority of LastPass users don't have a reason to use TOR, you can now disallow logins from TOR. We recommend checking this option if you never use TOR,” the company announced.