That way, one breach won’t lead to all your other accounts being compromised. Whether you use a password manager or not, you can protect yourself by using strong, unique passwords that are not used on multiple sites.
It goes to show that not even the most popular services are immune to hacking attacks and security breaches. Once that’s complete, the company recommends users update all of the passwords that had been stored in LastPass with fresh replacements. Right now, Intego advises LastPass users to immediately begin migrating their accounts to another password manager. LastPass itself claims it has over 33 million users - if the claims about its lax security are correct, that’s a huge number of people whose accounts, passwords and credit card data are all now potentially vulnerable. It’s a remarkable statement to make given LastPass’ popularity. Rival password manager 1Password has added its opinion into the mix, claiming that it would cost a hacker $100 or less to crack the master passwords protecting many LastPass vaults, such is the weakness of LastPass’ hashing methods.Īll of that has led Intego to state that, “given what we now know about LastPass - both how the company operates and its technology - we do not recommend using LastPass as a password manager.” How to keep your passwords safe According to security researcher Wladimir Palant, for example, LastPass’s statements were “full of omissions, half-truths, and outright lies.” One of Palant’s allegations is that LastPass’ implementation of a password-strengthening algorithm is not considered strong enough based on industry standards, making users’ vaults far too easy to hack into. However, Intego maintains that third-party analyses of the breach suggest a more troubling scenario. Questionable practices Ash Edmonds/Unsplash Fitbit Versa 3įinally, in December, LastPass admitted the data accessed by the hackers was used to trick a company employee into handing over keys to some customer credentials, which were then used to access and decrypt customer data.
0 kommentar(er)
