I abandoned LastPass after being bought out by LogMeIn. Really, unless protected by two factor authentication? But, my two factor secrets were stolen as well! Steve mentioned that you should (roughly 1:52:30) 'take the time to scan through your vault changing the login passwords of any of your important accounts which are not also protected by some form of strong second factor authentication' Two-Factor Authentication, and how it has been affected.Īfter listening to a two-hour 'Security Now' podcast with Steve Gibson and Leo LaPort, they covered the technical details of the breach very well, but one comment near the end of the show had me worried. I'll go into some technical details later, but I want to bring up something I haven't heard discussed properly. However, for most people it's not blindingly obvious beyond the breach itself, why, from a technical perspective they should be avoiding LastPass completely. Sure, it's become obvious in the last few weeks why people should be seriously reconsidering their choice of password manager.

Lastpass two factor