Attacks/Breaches
9/19/2013
10:49 AM
Dark Reading
Dark Reading
Products and Releases
50%
50%

Toopher Partners With LastPass

LastPass now supports multifactor authentication with Toopher

LastPass, the company that's helping the world remember their passwords and better manage their online lives, announced it now supports multifactor authentication with Toopher, online security's "user experience company". Toopher provides more flexibility for LastPass users and furthers the mission of helping consumers be proactive about their online security.

Multifactor authentication requires the use of a second piece of information or a device that generates that information before allowing access to an online account. Two pieces of data must be entered by a user - a username and password, then the user provides a code or generated key from a device or app. Adding multifactor authentication creates a significantly more secure authentication process, so that even a compromised password does not translate to a compromised account. By enabling multifactor authentication with their LastPass account, users are mitigating the risk posed by ever-increasing breaches of online sites.

The key advantage to LastPass' implementation of Toopher is that there is zero user intervention required once enabled, unlike traditional two-factor security solutions.

Toopher can be downloaded from the app stores on the user's Android or iOS device. Once downloaded, the user will go through steps to enable the multifactor authentication method via their LastPass account settings. After enabling Toopher with a LastPass account, the user will be prompted to "allow" access via the notification sent to their phone or this authentication process can be automated in known and approved locations.

"Providing as many multifactor options for our customers as possible allows them to protect their LastPass account in the way that works best for them," says LastPass CEO and Co-Founder, Joe Siegrist. "If LastPass generates and fills your passwords, and you utilize multifactor options like Toopher, you're essentially protecting all of your services with multifactor."

"We are excited to offer Toopher's ease of use and enhanced security to LastPass customers," says Josh Alexander, Toopher's CEO. "Toopher is the next generation of information security - that is, security that adds convenience and ease of use to its users, versus the traditional model where incremental barriers are added to the user experience. We are excited to partner with LastPass, as both our enhanced security offerings are all about improving the user experience."

Availability

LastPass currently supports Toopher on iOS and Android, and is free for LastPass consumers. Toopher can also be added on to LastPass Enterprise accounts with additional licenses.

About LastPass

LastPass (www.LastPass.com) is the leading password and data management service, providing online users worldwide an easy, fast, and secure way to manage access to their digital life. It's free to install on all browsers and computers, with a Premium upgrade for mobile access and added features. LastPass Enterprise provides a centralized and cost-effective password management platform for organizations, with the option to add SAML-based single sign-on for federated identity management of cloud applications. LastPass is a Fairfax, VA-based company founded in April 2008.

About Toopher

Toopher is an invisible, location-based authentication solution designed around user behavior and powered by your phone's location awareness. By marrying the strongest state-of-the-art, true out-of-band pervasive technology with decidedly lean and thoughtful user experience, Toopher automates the authentication process via your phone--not only preventing online fraud and identity theft, but creating a security solution that people actually want to use. No more password hacks, no more codes. It's simple, secure, and your phone stays in your pocket. Founded in 2011 by a University of Texas PhD student and an adjunct professor, Toopher is funded by Alsop Louie and is a portfolio company of the Austin Technology Incubator. To learn more and try it for yourself, visit http://toopher.com and follow us @toopher

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-8142
Published: 2014-12-20
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys w...

CVE-2013-4440
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 generates weak non-tty passwords, which makes it easier for context-dependent attackers to guess the password via a brute-force attack.

CVE-2013-4442
Published: 2014-12-19
Password Generator (aka Pwgen) before 2.07 uses weak pseudo generated numbers when /dev/urandom is unavailable, which makes it easier for context-dependent attackers to guess the numbers.

CVE-2013-7401
Published: 2014-12-19
The parse_request function in request.c in c-icap 0.2.x allows remote attackers to cause a denial of service (crash) via a URI without a " " or "?" character in an ICAP request, as demonstrated by use of the OPTIONS method.

CVE-2014-2026
Published: 2014-12-19
Cross-site scripting (XSS) vulnerability in the search functionality in United Planet Intrexx Professional before 5.2 Online Update 0905 and 6.x before 6.0 Online Update 10 allows remote attackers to inject arbitrary web script or HTML via the request parameter.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Join us Wednesday, Dec. 17 at 1 p.m. Eastern Time to hear what employers are really looking for in a chief information security officer -- it may not be what you think.