“The password manager’s [LastPass] most recent data breach is so concerning, users need to take immediate steps to protect themselves.”

“with vaults recovered, the people who hacked LastPass have unlimited time for offline attacks by guessing passwords and attempting to recover specific users’ master keys.”

“They [LastPass] failed to do the one thing they are supposed to provide–cloud-based secure credential storage.”

“I [Jeremy Gosney (Yahoo)] used to support LastPass. I recommended it for years and defended it publicly in the media … But things change.”

https://www.wired.com/story/lastpass-breach-vaults-password-managers

Publication date: 12-28-2022