If someone with a recent LastPass account followed best practices and used a strong, unique master password, their data is probably still private (other than all the unencrypted identifying stuff). LastPass has been criticized for years for its inadequate security precautions and failure to update legacy accounts. Regardless of whether the hackers could crack the passwords, they still had a lot of personal and identifying data about every affected LastPass user.Īnd even the encrypted passwords aren't necessarily safe.

Some fields in the vault databases-like passwords-were encrypted, but others, like email addresses, telephone numbers, the IP addresses customers used when accessing LastPass, and billing addresses weren't. What information? Well, it took until December 22, but LastPass came clean: the hackers had a backup of customer vault data. Then, at the end of November, LastPass announced that one of its third-party cloud storage services had been hacked 'using information obtained in the August 2022 incident' and that the hackers had gained access to some customer information. Embarrassing for a security company, but it wasn't the first time the company had been hacked-and this was a less compromising breach. In September, it declared that its investigation was complete and all was well, and that there was no evidence any customer data or encrypted vaults had been compromised.

It claimed that it had contained the breach and had taken mitigation measures. In August 2022, LastPass disclosed that a hacker had compromised a developer account and gained access to its development environment. It's meant to be encrypted and well-protected, so with that in mind, it's worth taking a step back and looking at the ongoing fallout of the LastPass hack last year.

To make things as convenient as possible, both LastPass and 1Password store all your login information on their servers. ⭐⭐⭐⭐ It's available on nearly every platform, but you don't always get native appsĪ password manager has two main jobs: to keep your passwords safe, and to make filling them in easy. ⭐⭐⭐⭐⭐ Easy to import passwords, generate new passwords, and log in to existing accounts ⭐⭐ Recent data breach and less than ideal security in general ⭐⭐⭐⭐⭐ Best in class security and has never had a breach

1password family upgrade