LastPass users warned their master passwords are compromised

Re:LastPass users warned their master passwords are compromised by DougN7 on Tuesday December 28, 2021 @03:23PM (#29717638)

I’ve decided that besides a password manager, all of my passwords will also have a number at the end, like 8 (simple, easy to append manually in a password field. Now the password manager has to get defeated AND my own small personal salt value will have to be known.

[ Parent | on HN ]

Re:LastPass users warned their master passwords are compromised by argestes on Tuesday December 28, 2021 @03:32PM (#29717743)

Now we know

[ Parent | on HN ]

Re:LastPass users warned their master passwords are compromised by willis936 on Tuesday December 28, 2021 @05:18PM (#29718965)

Now you know that there is some sort of salt. That isn't helpful to an attacker trying to cryptographically crack a password if they already have the password database.

[ Parent | on HN ]

Re:LastPass users warned their master passwords are compromised by lunarboy on Tuesday December 28, 2021 @04:08PM (#29718208)

This is a good idea that's never occurred to me. I guess you could also consider it like having one password for all your accounts, except salted with some random string from your password manager

[ Parent | on HN ]

Re:LastPass users warned their master passwords are compromised by mongol on Tuesday December 28, 2021 @05:56PM (#29719317)

Will it always be 8? Or will it vary?

[ Parent | on HN ]

Re:LastPass users warned their master passwords are compromised by yawaworht1978 on Tuesday December 28, 2021 @03:37PM (#29717805)

Good idea, I would add a yubikey to that, for an additional step.

[ Parent | on HN ]