, blowdart wrote

*snip*

So if you believe they do what they say they do they're encrypting the passwords with your master password (pretty standard), so they can't see the actual data.

Well, lets at least hope that lastpass is salting that....