I and my employers, #1Password, have never directly criticized a competitor before. But #LastPass's claim that it would take "millions of years" to crack the data made available from the breach needed to be addressed explicitly.
I also take the opportunity to explain why 1Password's distinct security architecture would keep users safe if we were to be breached.
Blunder by 1Password on this blog post. You stay above the fray when your competitor screws up like this and the entire rest of the internet is rightly piling onto them. If I worked there I’d be putting out content pieces for a month on how awesome their security was in all the ways LastPass’s is crap, but even the CIA couldn’t waterboard me into mentioning the LP breach by name as I’m doing it. https://blog.1password.com/not-in-a-million-years/
Jeffrey Goldberg
D. Creemer