News for hackers. Stuff that matters.

A comment on Ask HN: How did my LastPass master password get leaked?. Parent comment

Re:Ask HN: How did my LastPass master password get leaked? by znep on Monday December 27, 2021 @07:22PM (#29708677)
One other thing to note is that by default lastpass allows reverting to your previous password for 30(?) days. The option is in account settings -> advanced -> "Allow master password changes to be reverted".

To be safe you would probably want to disable that then change your password again. Just don't lose your new password as you then can't revert.

See https://support.logmeininc.com/lastpass/help/recover-your-lo...

[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by mkopinsky on Tuesday December 28, 2021 @02:30PM (#29717024)
I last changed my master password in 2019, and it gave me the option to revert to previous password. So it's not just a 30 day thing.
[ Parent | on HN ]
Re:Ask HN: How did my LastPass master password get leaked? by znep on Tuesday December 28, 2021 @03:26PM (#29717670)
That is concerning and directly contradicts the docs:

"You can revert to your previous master password only if the change had taken place within the last 30 days."

I guess it is possible it is another UX issue and would fail if you tried, but that still isn't very reassuring.

[ Parent | on HN ]