Whether password managers are, in fact, a greater risk or greater benefit to keeping your data secure, the only conclusive result from this hack is the importance of two-factor authentication.Īs we've described in a recent blog post, two-factor authentication (2FA) is using something you know (a password) and something you have (e.g., a one-time password on your smartphone or tablet) for authentication and access to your account. While many in the IT industry have been skeptical of using password managers for fear of them being enormous targets for hackers, others have argued that the benefits outweigh the risks-namely, that password managers enable people to use randomly generated, stronger passwords and reduce human error that comes with using weak passwords. However, they announced that they have found 'no evidence that encrypted user vault data was taken, nor that LastPass user accounts were accessed.' After noticing suspicious activity on their network, LastPass discovered that their account email addresses, password reminders, server per user salts, and authentication hashes were compromised. On Monday, June 15, 2015, a popular password manager, LastPass, announced a security breach.

Can you trust lastpass