lastpass-vault-parser icon indicating copy to clipboard operation
lastpass-vault-parser copied to clipboard

unencrypted hexname field added to Secure Notes

Open mepster opened this issue 2 years ago • 0 comments

Thanks for your detailed analysis!

However you might warn people about the following:

Unlike a Password item, the "name" of a Secure Note item is not safe.

For Secure Notes, LastPass saves the encrypted "name" parameter, but unfortunately also adds an unencrypted "hexName" parameter with the same contents.

See my reddit post https://www.reddit.com/r/Lastpass/comments/zzz5x4/comment/j38z90l/?utm_source=share&utm_medium=web2x&context=3

mepster avatar Jan 06 '23 21:01 mepster