Password Storage services

Forums › Desktop computing › Password Storage services

1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | ... | 10

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#3013451 23-Dec-2022 14:07

GV27:

Lastpass breach is almost as bad as it can get.

Absolutely staggering. Whatever is left of it will be sued into the ground.

Yep it just keeps getting worse and worse.

If anyone's missed the latest update, after saying no customer data was taken, now it's all customer data was taken. Any customer data such as user/company name, address, email, phone, IP, as well as copies of the password vaults which apparently contain unencrypted URL information alongside the encrypted data.

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup.

GV27

5897 posts

Uber Geek

#3013508 23-Dec-2022 15:29

Yup. You are now reliant on the strength of your master password to protect your data. Changing it now is no good. They have that data offline. Some of it was unencrypted in the first place. The potential for targeted phishing has just gone through the roof for LP users.

jarledb

Webhead
3257 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3013513 23-Dec-2022 16:00

Lias:

Yep it just keeps getting worse and worse.

If anyone's missed the latest update, after saying no customer data was taken, now it's all customer data was taken. Any customer data such as user/company name, address, email, phone, IP, as well as copies of the password vaults which apparently contain unencrypted URL information alongside the encrypted data.

Luckily never started using Lastpass. And after their previous security issues I have stayed well clear.

It is mind boggling that they still hadn't made sure their security was fool-proof.

I mean, this has been going on for some time.

From Wikipedia:

Jarle Dahl Bergersen | Referral Links: Want $50 off when you join Octopus Energy? Use this referral code
Are you happy with what you get from Geekzone? Please consider supporting us by making a donation or subscribing.

Tinkerisk

4227 posts

Uber Geek

#3013561 23-Dec-2022 16:32

Bitwarden Premium + YubiKeys

- NET: FTTH, OPNsense, 10G backbone, GWN APs, ipPBX
- SRV: 12 RU HA server cluster, 0.1 PB storage on premise
- IoT: thread, zigbee, tasmota, BidCoS, LoRa, WX suite, IR
- 3D: two 3D printers, 3D scanner, CNC router, laser cutter

Lias

5589 posts

Uber Geek

ID Verified

Trusted

Lifetime subscriber

#3013563 23-Dec-2022 16:52

I ditched them for BitWarden a long time ago and told them to delete my account which hopefully they actually did.. and my master password was strong.. so I'm hopeful I won't be impacted personally..

Senecio

2710 posts

Uber Geek

ID Verified

Lifetime subscriber

#3013579 23-Dec-2022 18:57

I've been meaning to move to BitWarden now for two years and every time I leave it too late and just pay for another year of family for my wife and I.

If I'm going to have to go to the trouble of changing every pass word in our vaults it looks like now is the time I will finally follow through.

michaelmurfy

meow
13243 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#3013591 23-Dec-2022 20:12

@Senecio migration is super easy. You export from LastPass and import into Bitwarden. I personally find Bitwarden so much more polished.

Also learn the auto fill keyboard shortcut for browsers. It’s handy.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Note that to use Quic Broadband you must be comfortable with configuring your own router.

rb99

3423 posts

Uber Geek

Lifetime subscriber

#3013719 24-Dec-2022 09:11

So...if you move from LastPass to say Bitwarden -

is there any reason to assume you passwords are any safer there than at LastPass ?

if you move should you just copy passwords over is it better to change them ?

“The modern conservative is engaged in one of man's oldest exercises in moral philosophy; that is, the search for a superior moral justification for selfishness.” -John Kenneth Galbraith

rb99

Jase2985

13459 posts

Uber Geek

ID Verified

Lifetime subscriber

#3013731 24-Dec-2022 10:38

the only thing protecting your lastpass passwords is your master password, if that was weak there is a chance it could be compromised now or sometime in the future.

i dont think bitwarden has been breached, a quick google search doesnt show anything.

timmmay

20579 posts

Uber Geek

Trusted

Lifetime subscriber

#3013732 24-Dec-2022 10:39

I'd change them, at least the key ones. With self hosted Bit warden / VaultWarden I've set up firewall rules so it can only be accessed from my public IP, for additional security.

VaultWarden is a third party implementation that uses significantly less resources than the open source BW server. I have an AWS t3a.nano with 512MB of ram and a bit of swap running Nginx, php, MySQL, Sync thing, and VaultWarden in a docker container. It would easily run on a R.Pi.

Senecio

2710 posts

Uber Geek

ID Verified

Lifetime subscriber

#3013733 24-Dec-2022 10:40

I’m going to change them. If your LastPass master password is compromised and you haven’t changed your passwords then it doesn’t matter if you have moved to Bitwarden or not then your accounts will still be compromised.

I’m in the middle of doing this now.

22 passwords changed, only 160 to go!

rb99

3423 posts

Uber Geek

Lifetime subscriber

#3013735 24-Dec-2022 10:48

Maybe t'other half is right - stick to pen and paper

“The modern conservative is engaged in one of man's oldest exercises in moral philosophy; that is, the search for a superior moral justification for selfishness.” -John Kenneth Galbraith

rb99