1
0
I recently started using a password manager, specifically LastPass. I have understood how the app works internally to store, encrypt and give me access to my passwords. My question that does not feel intuitive is what is the best policy to create a login for the app.
Of course I need to use an email account to create the LastPass account. My concern is that is if I use LastPass to store my login credentials for that email account, then forgetting my master password means that I have no access to my email. And no access to my email equals no way to recover my LastPass account. On the other hand, if I keep my email login independent, then my LastPass account is as safe as my email password.
Should my email and LastPass accounts have 2 different strong passwords, the same password, or let LastPass create a login for my email? The first choice makes it harder to remember two different complex passwords. The other two choices have obvious drawbacks in case you need password recovery.
LastPass only keeps the password to your email account and nothing prevents you from entering manually that password when logging to your email account. Forgetting the master password in effect denies you access to your LastPass database of form-fills & passwords, but does not block any of the services whose forms & passwords you have stored in LastPass. Or have I misunderstood your question? – harrymc – 2018-12-11T13:03:23.897