Attacks/Breaches
9/19/2013
10:49 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Toopher Partners With LastPass

LastPass now supports multifactor authentication with Toopher

LastPass, the company that's helping the world remember their passwords and better manage their online lives, announced it now supports multifactor authentication with Toopher, online security's "user experience company". Toopher provides more flexibility for LastPass users and furthers the mission of helping consumers be proactive about their online security.

Multifactor authentication requires the use of a second piece of information or a device that generates that information before allowing access to an online account. Two pieces of data must be entered by a user - a username and password, then the user provides a code or generated key from a device or app. Adding multifactor authentication creates a significantly more secure authentication process, so that even a compromised password does not translate to a compromised account. By enabling multifactor authentication with their LastPass account, users are mitigating the risk posed by ever-increasing breaches of online sites.

The key advantage to LastPass' implementation of Toopher is that there is zero user intervention required once enabled, unlike traditional two-factor security solutions.

Toopher can be downloaded from the app stores on the user's Android or iOS device. Once downloaded, the user will go through steps to enable the multifactor authentication method via their LastPass account settings. After enabling Toopher with a LastPass account, the user will be prompted to "allow" access via the notification sent to their phone or this authentication process can be automated in known and approved locations.

"Providing as many multifactor options for our customers as possible allows them to protect their LastPass account in the way that works best for them," says LastPass CEO and Co-Founder, Joe Siegrist. "If LastPass generates and fills your passwords, and you utilize multifactor options like Toopher, you're essentially protecting all of your services with multifactor."

"We are excited to offer Toopher's ease of use and enhanced security to LastPass customers," says Josh Alexander, Toopher's CEO. "Toopher is the next generation of information security - that is, security that adds convenience and ease of use to its users, versus the traditional model where incremental barriers are added to the user experience. We are excited to partner with LastPass, as both our enhanced security offerings are all about improving the user experience."

Availability

LastPass currently supports Toopher on iOS and Android, and is free for LastPass consumers. Toopher can also be added on to LastPass Enterprise accounts with additional licenses.

About LastPass

LastPass (www.LastPass.com) is the leading password and data management service, providing online users worldwide an easy, fast, and secure way to manage access to their digital life. It's free to install on all browsers and computers, with a Premium upgrade for mobile access and added features. LastPass Enterprise provides a centralized and cost-effective password management platform for organizations, with the option to add SAML-based single sign-on for federated identity management of cloud applications. LastPass is a Fairfax, VA-based company founded in April 2008.

About Toopher

Toopher is an invisible, location-based authentication solution designed around user behavior and powered by your phone's location awareness. By marrying the strongest state-of-the-art, true out-of-band pervasive technology with decidedly lean and thoughtful user experience, Toopher automates the authentication process via your phone--not only preventing online fraud and identity theft, but creating a security solution that people actually want to use. No more password hacks, no more codes. It's simple, secure, and your phone stays in your pocket. Founded in 2011 by a University of Texas PhD student and an adjunct professor, Toopher is funded by Alsop Louie and is a portfolio company of the Austin Technology Incubator. To learn more and try it for yourself, visit http://toopher.com and follow us @toopher

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading December Tech Digest
Experts weigh in on the pros and cons of end-user security training.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3407
Published: 2014-11-27
The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(.2) and earlier does not properly allocate memory blocks during HTTP packet handling, which allows remote attackers to cause a denial of service (memory consumption) via crafted packets, aka Bug ID CSCuq68888.

CVE-2014-4829
Published: 2014-11-27
Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allows remote attackers to hijack the authentication of arbitrary users for requests tha...

CVE-2014-4831
Published: 2014-11-27
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to hijack sessions via unspecified vectors.

CVE-2014-4832
Published: 2014-11-27
IBM Security QRadar SIEM and QRadar Risk Manager 7.1 before MR2 Patch 9 and 7.2 before 7.2.4 Patch 1, and QRadar Vulnerability Manager 7.2 before 7.2.4 Patch 1, allow remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.

CVE-2014-4883
Published: 2014-11-27
resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle attackers to conduct cache-poisoning attacks via spoofed reply packets.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Now that the holiday season is about to begin both online and in stores, will this be yet another season of nonstop gifting to cybercriminals?