Lastpass gets fined for 2022 breach

Yesterday, this article and the Cyberwire talked about the fact that Lastpass didn’t do enough to prevent several breaches in 2022 which we talked about on TSB at the time.

While Lastpass is still recommended, this is a tricky situation. Lastpass and other services like Keypass and One Password could have the same problem that Lastpass had where they were tricked in to doing things and giving up the master password for some reason or another.

I suspect as the years go on, our master passwords must be longer than the 12 that I have, or the 16 that may be recomended.

This is where Pass Phraises would come in, so at least we could write it down somewhere, say a note taker, our phone, some other app, in such a way where we know what it is, but an actor couldn’t even guess.

We’ve talked about pass phraises during the NCSAM time each year on TSB.

The article is titled UK fines LastPass over 2022 data breach impacting 1.6 million users is the article and not much is really mentioned during the segment on the cyber wire.

Let me know what you think.