6/29/2023 0 Comments Lastpass safe or notThis approach leads to some uncomfortable conclusions about how LastPass thinks about breaches, handles their own security, and cares about you the customer. Plus, they never pushed their users to change their critical passwords just in case. But, most people don’t use a long complex password on their vaults, which means the risk of a breach is high. The real kicker came when their “solution” relied solely on the opinion that everyone’s data was essentially safe because it was encrypted and hackers would need up to 1 million years to hack the data-a true statement IF you are using a long and complex password. Instead of communicating the breach immediately, in detail, and honestly, they chose to hide details, miscommunicate, AND provide more facts only AFTER they were investigated. The troubling part of the recent LastPass security incident is how LastPass handled the situation. In our digital world, there will always be cybersecurity risks for all companies, including password management firms like LastPass. If your LastPass master password was not a long, complex combination, you might be in trouble and it’s time to change your passwords ASAP. Complex passwords can take years, decades, or centuries to crack.). If you used a complex and long password for your LastPass vault, then you are somewhat protected (i.e., The hackers and their bots will ignore your account for now and attempt to crack the easy ones first. However, the hackers can use “brute force” (a hacking method that uses trial and error to crack passwords, login credentials, and encryption keys) to break get individual vault access. Fortunately, each password vault is encrypted and the encryption keys were not part of the data stolen. Not just a breach that accessed data the data tables were stolen! That means the hackers have the data files. Recently, LastPass had a MAJOR security breach in which presumably their entire customer base’s password vaults were stolen. They had been around for years and were one of the top reliable/secure choices. LastPass was easy to use, worked on multiple devices, secure, and had a good reputation. I’ve touted the password manager called LastPass as the best platform and I’ve been its fan for years. Managers allow users to develop a litany of complex, effective passwords without having to remember or write down tens if not hundreds of passwords. I’ve been a big proponent of using a password manager for years.
0 Comments
Leave a Reply. |