Andrew CoutsDec 28, 2022
If you're still using LastPass, you should really turn on two-factor on every account that offers it, change all your passwords, and switch to a new password manager thanks to the severity of its most recent breach, reports @lhn http://www.wired.com/story/lastpass-breach-vaults-password-managers
LastPass Data Breach: It’s Time to Ditch This Password Manager

The password manager’s most recent data breach is so concerning, users need to take immediate steps to protect themselves.

WIRED
Show threadStephen DrennanDec 28, 2022
@couts @lhn
I use Dashlane. Which I think is OK, as they encrypt everything…?
Show threadAndrew CoutsDec 28, 2022
@AVO8OHM @lhn LastPass encrypts everything too. It’s more that the company has had multiple security incidents, and it’s not providing users with information they need to assess their risk.
Show threadAndrew CoutsDec 28, 2022
@AVO8OHM @lhn Sorry, not “everything”—it doesnt encrypt URLs of saved accounts, which could allow the attackers to target their cracking efforts
Show threadStephen Drennan
@couts @lhn OK, ta.
Dec 29, 2022 at 7:43amWeb