LastPass password manager hacked-

[Omega Man]

World’s Most Popular Password Manager Says It Was Hacked-

Via Bloomburg

https://www.bloomberg.com/news/artic...-it-was-hacked

OM

[patm]

"

The company doesn’t believe any passwords were taken as part of the breach and users shouldn’t have to take action to secure their accounts, according to a blog post on Thursday. "

Just to be on the safe side I would change my password...

[brownie0486]

I keep a list of my passwords for various sites in a secure physical location here, not on some cloud based server which can be hacked.

[rogerc60]

I like Safe In Cloud. It syncs to all my devices, but they don't keep any of my data on their servers. Instead, my data is stored in my Google drive as an encrypted file, and it gets decrypted only on my local devices.

[adamchandler]

Hilarious. I stopped using LastPass in 2010 the 2nd major time it was hacked. It proceeded to be breached at least 5 more times since then. When will people learn this company is not doing much to protect your passwords?

Their Wiki page has a whole section devoted to security breaches - https://en.wikipedia.org/wiki/LastPass

STOP USING LAST PASS.

[czawade]

While the number of hacks of LastPass is a concern (and of course they will be a target for hackers), they operate on a "trust no one" model. This means that even LastPass does not hold any of your passwords, including your master p/w.

This is good and bad. The bad is that if you forget your master password, even LastPass can't retrieve it. Unless you created some onetime passwords, which LastPass recommends, you are SOL and your password store will be unrecoverable.

The good is a case like this - hackers don't have access to your master password through LastPass, let alone your own passwords stored within.

I have no affiliation with LastPass other than being a user. Frankly, while password managers are the best way of maintaining unique and random passwords for everything, they all could be a target of a hack. The fact that LastPass uses a trust no one model adds to its security for me. There are probably others doing the same, but none of them are 100% immune to clever hackers finding a way in.

caz

[Paul_F]

I keep a list of my passwords for various sites in a secure physical location here, not on some cloud based server which can be hacked.

Likewise.

[mikegalbicka]

“Quote Originally Posted by brownie0486

I keep a list of my passwords for various sites in a secure physical location here, not on some cloud based server which can be hacked.”

Likewise.

That is exactly what this solution does for you. Likewise it gives you access to it from anywhere in the world.

I also encourage you to have a backup in a separate secure location in case of fire or other disaster.

[mikegalbicka]

I ran across this guy’s explanation of password manager vaults and he does a very good job of covering all the bases in easy to understand language. If you still practice dangerous password habits I encourage you to give it a read.

https://noseynick.net/vault.html