LastPass breach gets worse – reddit.com/r/sysadmin

Re:LastPass breach gets worse – reddit.com/r/sysadmin by tallanvor on Wednesday January 25, 2023 @09:42AM (#34518775)

Honestly, even before this latest update, it's safest to assume that your data will be decrypted at some point, and get started changing everything now.

Luckily I had already switched over to Bitwarden, but I still had around 250 accounts to go through, although about 40 entries ended up being duplicates, defunct sites/products, or so old that the accounts were already deleted due to inactivity.

If you haven't started rotating all of your credentials already, this news should definitely get you started on it!

[ Parent | on HN ]

Re:LastPass breach gets worse – reddit.com/r/sysadmin by adamsb6 on Wednesday January 25, 2023 @10:02AM (#34519038)

I never expected I'd experience such joy at a website failing to load, or to see it had been turned into a completely different business that doesn't even have a login form.

Thanks, LastPass!

[ Parent | on HN ]

Re:LastPass breach gets worse – reddit.com/r/sysadmin by slantedview on Wednesday January 25, 2023 @01:44PM (#34522408)

I did the Lastpass->Bitwarden migration around Christmas, and it was probably 6 hours all told just changing passwords for the accounts I administer. The good thing is, you get pretty fast at changing them after a while.

[ Parent | on HN ]