LastPass password manager hacked-

[Omega Man]

World’s Most Popular Password Manager Says It Was Hacked-

Via Bloomburg

https://www.bloomberg.com/news/artic...-it-was-hacked

OM

[patm]

"

The company doesn’t believe any passwords were taken as part of the breach and users shouldn’t have to take action to secure their accounts, according to a blog post on Thursday. "

Just to be on the safe side I would change my password...

[brownie0486]

I keep a list of my passwords for various sites in a secure physical location here, not on some cloud based server which can be hacked.

[rogerc60]

I like Safe In Cloud. It syncs to all my devices, but they don't keep any of my data on their servers. Instead, my data is stored in my Google drive as an encrypted file, and it gets decrypted only on my local devices.

[adamchandler]

Hilarious. I stopped using LastPass in 2010 the 2nd major time it was hacked. It proceeded to be breached at least 5 more times since then. When will people learn this company is not doing much to protect your passwords?

Their Wiki page has a whole section devoted to security breaches - https://en.wikipedia.org/wiki/LastPass

STOP USING LAST PASS.

[czawade]

While the number of hacks of LastPass is a concern (and of course they will be a target for hackers), they operate on a "trust no one" model. This means that even LastPass does not hold any of your passwords, including your master p/w.

This is good and bad. The bad is that if you forget your master password, even LastPass can't retrieve it. Unless you created some onetime passwords, which LastPass recommends, you are SOL and your password store will be unrecoverable.

The good is a case like this - hackers don't have access to your master password through LastPass, let alone your own passwords stored within.

I have no affiliation with LastPass other than being a user. Frankly, while password managers are the best way of maintaining unique and random passwords for everything, they all could be a target of a hack. The fact that LastPass uses a trust no one model adds to its security for me. There are probably others doing the same, but none of them are 100% immune to clever hackers finding a way in.

caz

[brownie0486]

While the number of hacks of LastPass is a concern (and of course they will be a target for hackers), they operate on a "trust no one" model. This means that even LastPass does not hold any of your passwords, including your master p/w.

This is good and bad. The bad is that if you forget your master password, even LastPass can't retrieve it. Unless you created some onetime passwords, which LastPass recommends, you are SOL and your password store will be unrecoverable.

The good is a case like this - hackers don't have access to your master password through LastPass, let alone your own passwords stored within.

I have no affiliation with LastPass other than being a user. Frankly, while password managers are the best way of maintaining unique and random passwords for everything, they all could be a target of a hack. The fact that LastPass uses a trust no one model adds to its security for me. There are probably others doing the same, but none of them are 100% immune to clever hackers finding a way in.

caz

I'm of the mindset the only way my pwd's get hacked is if someone breaks into my house. Unlikely at best it's broken into, even more unlikely they'd be able to unlock the safe, even more unlikely they'd find the list under the carpet of one of the shelves./

I trust no one with my passwords/acct log in's

[adamchandler]

While the number of hacks of LastPass is a concern (and of course they will be a target for hackers), they operate on a "trust no one" model. This means that even LastPass does not hold any of your passwords, including your master p/w.

This is good and bad. The bad is that if you forget your master password, even LastPass can't retrieve it. Unless you created some onetime passwords, which LastPass recommends, you are SOL and your password store will be unrecoverable.

The good is a case like this - hackers don't have access to your master password through LastPass, let alone your own passwords stored within.

I have no affiliation with LastPass other than being a user. Frankly, while password managers are the best way of maintaining unique and random passwords for everything, they all could be a target of a hack. The fact that LastPass uses a trust no one model adds to its security for me. There are probably others doing the same, but none of them are 100% immune to clever hackers finding a way in.

caz

I’ll approach this in a different way. While no method is 100% secure, there are other password companies out there that don’t get hacked every 12 months. That was my point.

[mikegalbicka]

LastPass users: Your info and password vault data are now in hackers’ hands
Password manager says breach it disclosed in August was much worse than thought.

https://arstechnica.com/information-...customer-info/