LastPass compromised; change your master password ASAP

LastPass, the password manager recently announced suspicious activity on its network. While the encrypted user vault data is safe, the company acknowledged that some of the data including email addresses, password reminder and authentication hashes were compromised. While everything now seems to be under control, users are recommended to change their master password as soon as possible. LastPass-password-breach

Password managers are said to be the best way to keep your passwords safe and secure from hackers but what if the vault itself gets compromised. It’s just been a week when a leading security firm Kaspersky was compromised by hackers and now it’s LastPass.

For those who don’t know, LastPass password manager is a leading password manager which employs localized, government-level encryption and local one-way salted hashes to give users a complete security with the go-anywhere convenience of syncing through the cloud. Users here have to remember only their master password and every other password is stored safely in their LastPass account. Sources state that the service currently is serving more than 76 million users.

While the company has already blocked the suspicious activity and everything is under control now, Joe Siegrist, LastPass CEO posted a notice in the official blog urging users to change their master passwords. The team is also notifying the users via personal email.

Siegrist says, “An email is also being sent to all users regarding this security incident. We will also be prompting all users to change their master passwords. You do not need to update your master password until you see our prompt. However, if you have reused your master password on any other website, you should replace the passwords on those other websites”.

As nothing is 100% secure, such security breach can happen to anyone, but it’s good to see that LastPass took the actions immediately and is also notifying the users personally via email.

Posted by with Tags
Shiwangi Peswani is a qualified writer and a blogger, who loves to dabble with and write about computers and the Internet. While focusing on and writing on technology topics, her varied skills and experience enables her to write on any topics which may interest her.

One Comment

  1. Ed

    This is one of the risks you run by letting an online service keep track of your passwords.

    One of the worst ideas ever, why? because EVERYTHING on the internet no matter how secure one thinks it MIGHT be is available for the taking, it all just depends on who wants it and how badly.

    My advice is that since this is not the first time this has happened with LastPass, ditch the account, delete all your passwords and information they have saved and don’t be so naïve with these services that store your passwords online, store you passwords OFFLINE in a secure place that only YOU know about.

Leave a Reply

Your email address will not be published. Required fields are marked *

2 + 2 =