Much of the security of your password manager depends on the strength and safety of your one Master Password. And I had seen no signs of my own accounts being breached.īesides, most password managers do not store or have any access to your Master Password or the encrypted information in your password database. When I heard about the LastPass breach - and, c’mon, what service hasn’t ever been breached, to some level or another? - naturally, I thought, “Ugh!” OK, it was more like “Oh, $%*#”! However, knowing that there are multiple layers of security, and that not all of the layers were breached, I wasn’t too worried about my accounts. Don’t rely on a false sense of security! What I did first Because that advice applies to ALL passwords and ALL password managers, not just to theirs.

(If you do have LastPass and haven’t already read it, please take the time now.)Įven if you’re not inclined to accept their apologies, or trust their plans for increased security in the future, you will hopefully take their advice to heart regarding password strength. Although LastPass was admittedly negligent and did not communicate well with its subscribers, they have since taken responsibility, explained what happened, and discussed the implications - not all of which are as scary as they seemed at first - in their March 1 st Security Incident Update and Recommended Actions blog post. LastPass users have all (belatedly) received email updates about their well-publicized security breach in August 2022.

Lastpass safe to use