Major security flaw found in LastPass may have given hackers access to all your passwords

[kids]

Millions of users have been put at risk following the discovery of a huge security flaw in the cloud based password manager LastPass

The critical zero day security hole – so called because it had lay unnoticed by LastPass developes – allowed hackers to remotely break into customer accounts.

LastPass is the world’s most popular online password manager which allows users to store their passwords and login details so that they can auto-fill in details whenever they try to login to one of their online accounts.

On its website, LastPass stresses the importance of security stating that it uses AES-256 bit encryption which helps to “ensure complete security in the cloud.”

[jeffkinn]

I saw this today and as a Last Pass Premium subscriber I was less than thrilled.

I might move to another service like 1password or Dashlane

[kids]

I have given up on password managers.

Apart from the security issues as demonstrated by the LastPass leak an increasing number of websites such as banking now require 2-3 step verification. Whilst all of the password mangers will  complete the basic log-in name and password none of them that I have used are able to use 2nd or 3rd step verification without manually entering the details.

As an example this afternoon to access online one of my credit cards I needed to enter account number, password, 3 letters from my 'secret answer' and finally a memorable date. 

[jeffkinn]

https://blog.lastpass.com/2016/07/lastpass-security-updates.html/?utm_source=FBPAGE&utm_medium=socia...

Worth reading this blog piece from Lastpass.

The recent news only relates to Firefox - not a browser I have ever used.