[TChad]

If you use LastPass, it might be time to move on to a different password manager. This is not the first time LastPass has been hacked.

The "Plex" program may also have been affected.

[1Old Pro]

LASTPASS, It will be the last time you use your password before hackers steal your identity.

[dfwgator]

LastPass = Dead Company Walking

[Red Badger]

Ping!..............

[Harpotoo]

Put your health data, banking data and passwords etc on the internet LOL:-)
What a bunch of maroons:-)

[Skwor]

No Plex was not as I read it, Plex had a breach but that was handled last year quickly and everyone warned to log off and change their passwords.

The breach involved salt and peppered data but the account key could have been used which is why the wanted everyone to log out of accounts.

As I read it they used his Plex account to compromise his LastPass Kingdom key access. Basically the guy is a moron and for the record LastPass has had a history of being miserable with security, they have no business being in the business.

[ImJustAnotherOkie]

I’ve been using Dashlane for years. I hope they are investigating their security at this moment.

[Mogger]

Why would anybody put their passwords information anywhere off their property?

It's just asking for trouble.

Online password managers? Nuts.

Just as crazy as storing your data in "the cloud", which = some server somewhere, you have no idea where.

[siamesecats]

read this

[dfwgator]

[Steely Tom]

Any password manager is going to be a high-priority target for attackers.

[ggrrrrr23456]

"Keys to the kingdom" is a little bit overblown... From the LastPass website: The threat actor was also able to copy a backup of customer vault data from the encrypted storage container which is stored in a proprietary binary format that contains both unencrypted data, such as website URLs, as well as fully-encrypted sensitive fields such as website usernames and passwords, secure notes, and form-filled data. These encrypted fields remain secured with 256-bit AES encryption and can only be decrypted with a unique encryption key derived from each user’s master password using our Zero Knowledge architecture. As a reminder, the master password is never known to LastPass and is not stored or maintained by LastPass. The encryption and decryption of data is performed only on the local LastPass client. For more information about our Zero Knowledge architecture and encryption algorithms, please see here.