This is a shame, as LastPass employs a “Security Challenge” that looks at the complexity of your passwords, then lets you know whether they’re strong enough, which at least encourages strong passwords. While that might be the case, security firms looking into the recent LastPass breaches found that LastPass’ hashing system for master passwords is not as strong as it could be, resulting in some researchers suggesting that a master password could be cracked for just $100. LastPass passwords are stored on its remote servers, but they are protected using 256-bit AES encryption.

Both LastPass and 1Password utilize a master password system to lock up all your login credentials in a robust digital vault. The most fundamental feature that every password manager needs to get right is protecting your passwords. That led major security outfits and researchers to condemn LastPass, and recommend that no one use it, even encouraging existing customers to migrate to other services.Īlthough LastPass is likely a better solution than not using a password manager, it is probably best to use a competing password manager until LastPass can be confirmed as a safe and secure platform for password storage again. Although none of the user password data was stolen in a readable form, its security is entirely dependent on the strength of the user’s master password and how strongly it was encrypted. LastPass suffered a series of security incidents in 2022 that lead to the theft of customer names, email addresses, billing addresses, partial credit card numbers, and encrypted user data, including login usernames and site passwords.

LastPass reveals how it got hacked - and it’s not good news

1password family plan