nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

LastPass Security Breach

mail

What, you weren't going to tell us you got HACKED????

https://www.cnet.com/tech/services-and-software/lastpass-customers-need-to-change-all-of-their-passwords/

I had to find out from someone I recommended LP to so I look like a FOOL???

Find more posts tagged with

Accepted answers

mail

I can't edit what I said, so I have to comment to make a correction.

Sorry, my website coder made me realize this is an OLD hack.

I didn't read the article carefully after someone gave it to me, I ONLY looked at the date of the article.

I did do a search, and I did get LP's email.

I'm now pissed at Cnet who I had issues with a couple of decades ago, so it's clear to me now that they are spewing FEAR porn now (maybe always did) and they know damm well that people may just look at the date of the article instead of the date of the actual hack.

Again, my apologies.

All comments

mail

I can't edit what I said, so I have to comment to make a correction.

Sorry, my website coder made me realize this is an OLD hack.

I didn't read the article carefully after someone gave it to me, I ONLY looked at the date of the article.

I did do a search, and I did get LP's email.

I'm now pissed at Cnet who I had issues with a couple of decades ago, so it's clear to me now that they are spewing FEAR porn now (maybe always did) and they know damm well that people may just look at the date of the article instead of the date of the actual hack.

Again, my apologies.

adeleframer

This is not an old hack.https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/

This is quite serious, as CNET says here:https://www.cnet.com/tech/services-and-software/change-your-lastpass-password-manager-before-its-too-late/

LastPass users must change all their passwords. CNET advises using a different password manager.

mail

I wish I could change.

I searched high & low for months 2 years ago & found nothing that had the same features (not just p/ws) as LP & even the one I found that had the same features, their interface was so difficult to understand (where to click/go) that I gave up.

I helped them in recommending changes, but of course they didn't.

Terrible that there's no options out there.

I didn't know about this other breach & I was NEVER notified in December, only in August.

chiaramaioni

i don't agree....I recently switched and finally left Lastpass for Nordpass....almost identical interface BUT with amazing customer care and....well withough all the problems i had with LastPass ( i was a paid costumere there as well...on both you can choose free or paying). Give it a try before its too late...last days for LastPass

mail

@Chiaramaioni

Well you got me excited for a minute until I went to my notes.

That's the SAME company that owns Nord VPN & here are my notes on that/them.

"NordVPN has common ownership with one of the biggest data mining companies in the world, Tesonet. So it makes about as much sense to trust Nord with your data as it would to sign up for a Google owned VPN (if they had one) and trust them to not share your data with Google.

As for Panama and 5 Eyes that too is completely irrelevant to NordVPN. Why? Because Nord isn't "located" in Panama. Nord doesn't have any personnel in Panama, or a data center, or anything. Nord pawns itself off as somehow being magically immune from 5 Eyes spying just because they're incorporated in Panama (but even that is false, as I'll explain). Their legal domicile provides no such legal protections at all. As I stated elsewhere in this thread: TF's question was in two parts, "2. What is the name under which your company is incorporated, and under which jurisdiction does your company operate?" Nord answers, "Tefincom S.A., operated under the jurisdiction of Panama." There's a couple problems with that. For one thing the answer is deceitful. NordVPN claims to be "operated" out of Panama, which makes it sound like that's where their main offices and personnel are. The reality is there's nothing there but a small pile of Nord's corporate filings at that location -- their attorney's desk drawer. The address is nothing more than a law office. It's an address used by many Panamanian shell companies. Secondly, Tefincom is the owner of the Registered Trademark name "NordVPN." Who or what is the registrar of NordVPN? The United States Patent and Trademark Office, registration #87190896. If Nord's intent is to avoid US legal jurisdiction, as well as 5 Eyes spying, such a move is about as stupid as it gets. It could be argued that by taking out a trademark registration from the US government that NordVPN is squarely under US jurisdiction. Furthermore Nord has made it easy for them to be targeted by the US government and also legally served since they're using as their correspondent an LLC located in Lakewood Ranch, Florida."

katcherw

I switched to 1Password. It turned out to be a superior interface and superior security because even the metadata is encrypted, unlike LastPass, and they strengthen the master password with a secret key. I haven't found any disadvantages yet after using it for over 3 months.

mail

@Raiver

Ok, I had to do a search to see why I never went with them.

So the guy I spoke to wasn't very bright.

I had asked if they had an import feature from LP & he told me they did, but THEN I found out (thank gawd I found out before I switched) that they don't have that for everything, only for p/ws.

I have tons of data as I mentioned that aren't p/ws in LP & I am NOT typing that all out manually in some other piece of software.

I wasn't thrilled that he didn't even know when I said import I meant EVERYTHING, not just p/ws or at the very least he should have clarified that when he said they did have an import feature. SMH

mail

@Raiver

I looked into them around 2 years ago & all they do is passwords.

I need something that has all of the features that LP has like filling in forms, credit cards, addresses, emails, etc.

I'm glad you like it.

katcherw

That makes sense. I only kept passwords in LP so my migration was very simple. I doubt any product will provide migration for all the extra data that can be stored into LP.

Personally, I only use password managers for passwords. One of the reasons is to avoid getting locked into one product and getting into this precise situation. I love 1Password so far, but the minute I find something that causes me to lose confidence, I will export my passwords and drop them in an instant. Probably my next step would be KeepassX.

katcherw

1Password also stores credit cards, addresses, email addresses, etc. Not sure what you mean by "forms", but you can generally store whatever you want. There are many categories besides passwords with and you can upload generic documents too.

simon

Had you thought of switching to post it notes? After todays blog it would seem they would offer similar levels of security.

Lastpass don't deserve your business.

mail

@Raiver

Well if they want my business, they have to at least attempt to get my hundreds of files into theirs.

Using seperate extensions doesn't make 100% sense to me, although I'm not sure that LP does what it USED to do which was to insert not just the cc info, but also the address too.

I find myself having to do the extra step of adding the cc separately & I never had to do that years ago.

And there really aren't any other extensions that I know of that stores addresses, emails, ccs, etc. minus the p/ws LOL

Plus I don't want to have to pay for 2 different pieces of software & once I have purchased from a site, I normally never have to insert my cc again unless it's a different one.

LP has saved me many a times when I've been outside, needed to get into a site or remember some info that I didn't have on me. I once had to log in on a bize's computer just to get what I needed.

For me it's not just for p/ws, it's for everything.

I was really upset when they started to go downhill after they were bought out, but I looked at my notes & they were having problems even before they sold. Maybe not as much, but I was having to contact them re: issues.