391–400 of 529 posts
Anyone else considering having another password managers, such as bitwarden, and periodically syncing it with lastpass?
Earlier quoted context omitted.
I suspect that it was a random phishing attempt. > Login attempt blocked > Hello, Someone just used your master password to try to log in to your account from a device or location we didn't recognize. LastPass blocked this attempt, but you should take a closer look. Looks fairly classic. Might want to look at the email headers, to see if it really came from LastPass. I get about ten of these a day. Some are scarily w…
Quick note that apple allows you to download a recovery code and disable all other account recovery mechanisms which I found incredibily soothing.
installed extensions: ublock origin, OneTab, Lastpass, metamask, cisco webex, edit this cookie
My login attempt info: Time Monday, December 27, 2021 at 5:51 PM EST Location GERMANY IP address 168.81.122.153 It was definitely a unique password. Last set in 2017, but changed now. I had just purged virtually all the data in the account recently, but it's still frightening.
Time Tuesday, December 28, 2021 at 6:20 AM EST Location GERMANY IP address 160.116.206.37
Anyone else considering having another password managers, such as bitwarden, and periodically syncing it with lastpass?
Sounds like securing your password manager with two factor authentication is a must!
I'm the OP -- I had 2fa enabled on my LastPass account, but didn't have access to the token (a 2fa app running on an old phone I don't have anymore) I was able to remove the 2fa myself by going through a recovery process and clicking a link they sent me over email... 2fa on LastPass is pretty much useless.
ah that's a little better if it at least needs email
Earlier quoted context omitted.
I agree. I contacted the support agent I talked to again with a link to this thread and all of the similar IP addresses that tried to login, presumably with the knowledge of our master passwords. I also sent off a random email to the Verge, and tried tagging LastPass on Twitter. Does anyone have tech media connections who could try to squeeze a word out of LastPass?
Looks like not getting any media attention. But There are now more than a dozen incidents which is quite worrying. Some twitter "expert" insist most of these incidents here were phished. But I read many of them hasn't even touch the password for years. And report of new account compromised suggest this isn't something done by phishing attempt. Not to mention most people here tends to be on a higher level of security…
Earlier quoted context omitted.
Malware is not impossible, but in my case, the password is stored in an encrypted keepass file. Did the malware wait for me to open my keepass vault and snoop the password then? Possibly. But it presumably could/would have done much worse things. Other people in this thread are also confirming that their password was unused anywhere else. And as more independent people are reporting the same story happening to them,…
Let me preface by saying I'm speculating of course. > Did the malware wait for me to open my keepass vault and snoop the password then? It's not impossible at least. There's been vulnerabilities in Keepass RPC which allowed any javascripts on Internet reading your passwords [1]. If a simple javascript can read secrets from keepass, I would not be at all surprised if that has happened. > the less probable it is that w…
uBlock Origin, Google Images Restored, Allow Right-Click, Clear Cache, StartMeeting.com Launcher, ShowPassword, Tampermonkey, Usability Hike: Find usability problems, Window Resizer, Tag Assistant Companion, Google Analytics Debugger, Google Docs Offline, Google Optimize, Google Suspicious Site Reporter