If you don’t plan on deleting your LastPass account, you should at least pick a new master password, especially if your original one wasn’t complex or unique enough.
#Lastpass gen how to#
While LastPass has been one of the best password managers for years now, these recent security incidents show how valuable hacking a company like this can be for an attacker (this is how to delete your LastPass account if you're so inclined). When users log into an online account for the first time, the system stores their username and password. If this is a bit unsettling as a LastPass customer, you may be thinking about deleting your account. LastPass creates, remembers, and fills in passwords. Should you delete your LastPass account?Īs reported by BleepingComputer, LastPass’ cloud storage breach is the second security incident disclosed by the company this year after it confirmed back in August that an attacker was able to breach its developer environment using a compromised employee account. LastPass will also never ask you to provide your master password. Touba also points out in his security incident notice that the company will never call, email or text customers or ask them to click on a link to verify their personal information in an effort to keep them safe from potential social engineering or phishing attacks.
However, due to the hashing and encryption methods used by the company, this “would be extremely difficult to attempt” – especially for customers who follow its best password practices.Īt the same time, the attacker may try to target LastPass customers through phishing attacks, credential stuffing or other brute force attacks against the online accounts stored in their vaults. While it appears that the passwords and other sensitive data stored by LastPass customers in their vaults is safe for now, Touba did warn that the attacker may try to brute force their master passwords in an attempt to decrypt their stolen vault data. It’s also worth noting that LastPass doesn’t know its customers’ master passwords, nor is this information stored or maintained by the company.
0 kommentar(er)
