Comment Comment by aussieguy1234 LastPass is architectured so that your master password is never sent to their servers. Decryption of your vault happens locally on your device. Maybe such an attacker might get your email address (username). parent aussieguy1234 4 years ago