

I also like them because they are VERY responsive to security researchers who find vulnerabilities in their code. LastPass supports a wide range from their own authenticator app that does push authentication to your device, Google authenticator, Yubikey, DUO, etc. What's important to remember with LastPass (or any password manager for that matter) it's only as strong as your master password, use one that isn't used anywhere else and turn on MFA. This encrypted blob is what is synchronized across machines and devices, LastPass never sees the contents of this blob. The way it works is by creating the database on your local computer as an encrypted blob. LastPass, or really any password manager is your best option for protecting your passwords, I use it for everything and I'll be honest that I don't even know what many of my passwords are because I leave it up to the app to generate account passwords for me.
