Bandola

Check what http://blog.meldium.com/home/2014/4/10/testing-for-reverse-heartbleed has to say about client vulnerability.

I've been reading a bit more about how F-Secure Key is working. It all looks very good. So good in fact that perhaps Heartbleed leaking everything you've got won't matter. All passwords are encrypted with with a key derived from your own master password. The derived key and master password are never stored or transmitted…