LastPass Master Passwords Might Be Compromised

Countersign managers are useful because they allow you lot remember passwords to websites and services you often utilize. They can too be used to generate complex passwords to make information technology harder for people to approximate, and you tin then store those complex passwords in it and then you don't have to remember information technology yourself.

Of course, all of this is locked behind a master password, similar the key to a vault, which ways that unless someone else has that cardinal, they won't be able to admission your passwords. Unfortunately for LastPass users, they are reporting on Hacker News that they have received notifications of login attempts using their master passwords.

Some users are reporting that fifty-fifty irresolute their master password doesn't seem to help as bizarrely enough, they still become login attempt notifications even subsequently the countersign change. Withal, in a argument fabricated to AppleInsider, LastPass spokesperson Meghan Larson says that they have not been breached.

Co-ordinate to Larson, "LastPass investigated recent reports of blocked login attempts and nosotros believe the activeness is related to attempted 'credential stuffing' activity, in which a malicious or bad actor attempts to access user accounts (in this case, LastPass) using email addresses and passwords obtained from third-party breaches related to other unaffiliated services."

That beingness said, if yous do use LastPass, y'all should probably enable ii-factor authentication so that even if your primary countersign has been leaked, hackers won't be able to get into your account, unless for some reason they accept access to your phone or authenticator device.

Filed in . Read more about Hack, LastPass and Security. Source: appleinsider