I’m worried about LastPass’ incident, but I’m equally worried about password managers of renown at all that have not recently disclosed any (data or code base) cybersecurity incidents. Any password manager is a huge, juicy target…
I’m also worried about all y’all going “lololol pEoPle UsE LasTPaSs” when getting just one person on a reputable password manager they’ll actually understand how to use is a massive, uphill battle.
Anyway, like other sane people have said, you don’t have to stop using LastPass - for gods’ sakes just use a password manager. If you use it, spend some time over the holidays changing all your meaningful passwords in it and your master password. Make sure you’re signed up for haveibeenpwned. If a cloud-based password manager is right for your risk and threat model, for heavens sakes don’t stop using it in favor of a techier option you won’t use.
@hacks4pancakes might as well switch to a new one that is easier to use and more #secure (#FLOSS and never #hacked) such as #BitWarden or possibly #KeyPass
@hobs this is exactly the thing I’m warning against in this thread. For abnormally techy people who will spend the time to do it properly, sure! Also “never hacked” is like saying “it’s awfully quiet” and almost always leads to despair. But this is not good advice for the vast majority of people.