1320222 - Review FxA client-side key stretching parameters

Tom Ritter's personal homepage, where he rambles about tech-related topics.

We released PyFxA 0.7.9 last week (pypi). This added:

We’ve recently finished two significant changes to how Mozilla Accounts handles password hashes which will improve security and increase flexibility around changing emails. The changes are entirely transparent to end-users and are applied automatically when someone logs in.

Bitwarden is a hot candidate for a LastPass replacement. Looking into how they encrypt data, it doesn’t do things that much better however.