Attacks/Breaches
9/19/2013
10:49 AM
Dark Reading
Dark Reading
Products and Releases
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Toopher Partners With LastPass

LastPass now supports multifactor authentication with Toopher

LastPass, the company that's helping the world remember their passwords and better manage their online lives, announced it now supports multifactor authentication with Toopher, online security's "user experience company". Toopher provides more flexibility for LastPass users and furthers the mission of helping consumers be proactive about their online security.

Multifactor authentication requires the use of a second piece of information or a device that generates that information before allowing access to an online account. Two pieces of data must be entered by a user - a username and password, then the user provides a code or generated key from a device or app. Adding multifactor authentication creates a significantly more secure authentication process, so that even a compromised password does not translate to a compromised account. By enabling multifactor authentication with their LastPass account, users are mitigating the risk posed by ever-increasing breaches of online sites.

The key advantage to LastPass' implementation of Toopher is that there is zero user intervention required once enabled, unlike traditional two-factor security solutions.

Toopher can be downloaded from the app stores on the user's Android or iOS device. Once downloaded, the user will go through steps to enable the multifactor authentication method via their LastPass account settings. After enabling Toopher with a LastPass account, the user will be prompted to "allow" access via the notification sent to their phone or this authentication process can be automated in known and approved locations.

"Providing as many multifactor options for our customers as possible allows them to protect their LastPass account in the way that works best for them," says LastPass CEO and Co-Founder, Joe Siegrist. "If LastPass generates and fills your passwords, and you utilize multifactor options like Toopher, you're essentially protecting all of your services with multifactor."

"We are excited to offer Toopher's ease of use and enhanced security to LastPass customers," says Josh Alexander, Toopher's CEO. "Toopher is the next generation of information security - that is, security that adds convenience and ease of use to its users, versus the traditional model where incremental barriers are added to the user experience. We are excited to partner with LastPass, as both our enhanced security offerings are all about improving the user experience."

Availability

LastPass currently supports Toopher on iOS and Android, and is free for LastPass consumers. Toopher can also be added on to LastPass Enterprise accounts with additional licenses.

About LastPass

LastPass (www.LastPass.com) is the leading password and data management service, providing online users worldwide an easy, fast, and secure way to manage access to their digital life. It's free to install on all browsers and computers, with a Premium upgrade for mobile access and added features. LastPass Enterprise provides a centralized and cost-effective password management platform for organizations, with the option to add SAML-based single sign-on for federated identity management of cloud applications. LastPass is a Fairfax, VA-based company founded in April 2008.

About Toopher

Toopher is an invisible, location-based authentication solution designed around user behavior and powered by your phone's location awareness. By marrying the strongest state-of-the-art, true out-of-band pervasive technology with decidedly lean and thoughtful user experience, Toopher automates the authentication process via your phone--not only preventing online fraud and identity theft, but creating a security solution that people actually want to use. No more password hacks, no more codes. It's simple, secure, and your phone stays in your pocket. Founded in 2011 by a University of Texas PhD student and an adjunct professor, Toopher is funded by Alsop Louie and is a portfolio company of the Austin Technology Incubator. To learn more and try it for yourself, visit http://toopher.com and follow us @toopher

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-3946
Published: 2014-04-24
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.

CVE-2012-5723
Published: 2014-04-24
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CVE-2013-6738
Published: 2014-04-24
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.

CVE-2014-0188
Published: 2014-04-24
The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers to bypass authentication and impersonate arbitrary users via the X-Remote-User header in a request to...

CVE-2014-2391
Published: 2014-04-24
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potent...

Best of the Web