This means creating a secure password the right way for all accounts and devices.

You can check out the full reviews for some of our top password managers below:Įnsuring top-notch cyber hygiene is essential for the security of your devices and your private data. Unfortunately, the app’s ranking has been overtaken by other picks over time. LastPass used to lead the pack in both our best free password managers and best password managers overall overviews.

Seven embedded trackers were discovered in the LastPass Android app in February last year. In December 2021, users noticed multiple unauthorized attempted logins with their LastPass master passwords - which unlocks the app itself and reveals stored passwords. This is not the first time the widely used password manager has suffered a cybersecurity incident. “At this time, we don’t recommend any action on behalf of our users or administrators.” In addition, LastPass recommends users follow security and configuration best practices. Master passwords, vault data, and personal information have not been compromised, the company said. The company said it has “achieved a state of containment, implemented additional enhanced security measures,” and sees no further cause for concern for users. LastPass said that the investigation is ongoing and that all cybersecurity and forensics measures have been applied. Others said they did not notice anything suspicious. On the company’s official Twitter feed, some premium users were outraged saying that the company has been an “inconsistent, unreliable service,” for quite some time. LastPass has not publicly commented on the incident except via official information in the blog post and social media.

As a result, some sources say users began panicking while employees rushed to contain the breach. 25, that snippets of source code - vital instructions that software operates on - and some of LastPass’s proprietary technical information were stolen by an “unauthorized party.”Īccording to CEO Karim Toubba, unknown actors managed to break into one of LastPass’s software developer staff accounts, which helped them quietly steal the required data. LastPass, which caters to 33 million customers worldwide, said in its official blog post on Thursday, Aug. LastPass has confirmed that there is no evidence of user personal information (PII) compromise at the moment, while the investigation is ongoing. One of the world’s leading password managers, LastPass, announced Thursday that cybercriminals broke into one of the company’s staff accounts two weeks ago - stealing portions of the company’s source code and other technical information.

Lastpass password manager.