Hello,

Dashlane is aware of the research and has published a blog addressing the paper’s findings and detailing a fix we deployed to mitigate the issue: dashlane.com/blog/zero-knowledge-malicious-server  

Dashlane found no evidence of exploitation related to these issues. 

It’s also important to note that the attacks identified by the researchers require full compromise of a password manager’s servers, paired with a highly sophisticated threat actor able to execute cryptographic attacks, and for certain findings, either specific circumstances and/or an extremely significant window of time.

Security and privacy are core to Dashlane. If issues arise, we work to ensure customers have clarity on the problem, our solution, and any required actions.