I worked at LastPass as an engineer
> If you had a legacy 5000 rounds or 10000 rounds, the # of rounds can't just be increased server side. Changing that would mean a new key is derived. So older users likely still have a pretty low number of pbkdf2 rounds which makes them more vulnerable to brute forcing<p>Kind of unclear but i think this implies that lastpass doesn't do some  and reencrypt on login. Are they saying its just people who havent unlocked there vault in a decade, or are they saying all old users have this? If the latter this is really poor design.<p>> Lots of vault entries may be encrypted with ECB mode AES-256.<p>Wtf wtf wtf. This would be considered wildly insecure even by the standards of the 80s