Use LastPass? Change Your Master Password Now

Password manager LastPass has announced in a blog post that account email addresses, password reminders, server per user salts, and authentication hashes were “compromised” in a hack last Friday. On investigation, it seems that no encrypted user vault data was taken, nor were any user accounts accessed.

LastPass says it's confident its encryption measures are enough to prevent its users. As a security precaution however, LastPass is encouraging its users to change their master passwords. Plus, if you use the same password on other sites, you should change those passwords as well.

The company is also enforcing email verifications from users logging in from new locations to prevent unauthorised access. It's also encouraging its users to enable multi-factor authentication as another layer of security, if they haven't already done so.

Password managers like LastPass and 1Password help users store their passwords in the cloud, across multiple devices. They help generate complicated passwords for users, which are further encrypted to keep them secure. These long passwords are harder to crack, and users don't have to worry about remembering them as the app helps to fill in passwords at login pages. However, password manager accounts are opened via a master password, which the user does have to remember and keep secure.

Source: Lastpass blog, via Techmeme.

Our articles may contain affiliate links. If you buy through these links, we may earn a small commission.