LastPass is one of the best password manager available now, which helps you to create complicated passwords and also to manage all your passwords with just one master password. We have covered giveaways of this product before.
Now there is a bad news for the LastPass users, LastPass account email addresses, password reminders, server per user salts, and authentication hashes were compromised. So if you are lastPass user it is the time to change your master password.
Your other account passwords need not to be changed, but if you were using your master password on any other account, it will be better to change your password.
We want to notify our community that on Friday, our team discovered and blocked suspicious activity on our network. In our investigation, we have found no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed.
If your site is compromised, you will get an email from LastPass, asking to change your password.
Here is the message from LastPass
LastPass user accounts are locked down. You can only access your account from a trusted IP address or device – otherwise, verification is requested. We are confident that you are safe on your LastPass account regardless. If you’ve used a weak, dictionary-based master password (eg: robert1, mustang, 123456799, password1!), or if you used your master password as the password for other websites you need to update it.
Read more