In 2022, LastPass experienced two major data breaches that resulted in customer data being stolen, including both encrypted and unencrypted information, raising significant safety concerns.
Despite offering numerous multi-factor authentication options and a decent password management experience, LastPass's recent breaches severely undermine user confidence, making it difficult to recommend their service.
The first breach in August 2022 involved a compromised corporate laptop, giving access to LastPass source code and internal system secrets but claimed no vault data was stolen.
The second breach, disclosed on November 22, 2022, capitalized on the initial breach, granting unauthorized access to cloud backups, revealing both encrypted customer data and unencrypted website URLs.
Collection
[
|
...
]