The implications could be completely benign. Without knowing the details of exactly what the hackers stole in terms of source code, it’s difficult to assess the risk. The risk is not imminent, but it does exist. That’s not to say that there isn’t risk here. This increases my confidence in LastPass to do the right thing in the future should anything ever happen again. My take is that LastPass has done the right thing. They provided a detailed FAQ that consumers can refer to understand exactly how worried they should be. They were forthcoming about the details of the breach. LastPass’s announcement goes into more detail, but the bottom line for the average user is that you are not affected. In other words, as a LastPass user, my account credentials were not compromised, my LastPass vault was not compromised, my LastPass stored information was not compromised, and none of the entries in my LastPass database were compromised. The important thing to realize about the breach is that no user information was compromised.
Apparently some of it was stolen, and some of it contained what LastPass considered to be trade secrets. Using that account, hackers were able to get into LastPass source code. In short, the account of a LastPass developer was compromised. There are many decent and reliable alternatives.īut LastPass remains at the top of my list. I have an upcoming article on exactly which password managers you might want to consider. I totally understand why, reacting only to the headlines and without understanding the details, you might feel like you need to make a switch. In the case of LastPass, that means investigating a different password manager. If this or any other situation leads you to trust LastPass (or any software) less, then use something else that you do trust. Therefore, it’s important you trust your password manager. It’s important that you use a password manager. The reason is fairly simple: if you don’t trust the software, you’re less likely to use it. You need to trust the password vault or password manager you choose to use. I want to start by saying that trust is important. So even if this unnecessarily causes you to lose trust in LastPass, there are many excellent alternatives. However, trust is critically important when using a password vault. LastPass was forthright in publicizing the breach. The reported hack into LastPass does not involve any user data and does not warrant abandoning LastPass.
0 kommentar(er)
