LastPass Forced 2FA Reset
support.lastpass.com
LastPass Forced 2FA Reset
1–7 of 7 posts
Re: LastPass Forced 2FA Reset
#2Hey,
So i just got hit by this. Basically LastPass won't let you login anymore, unless you relink your 2FA with a new seed. Is there something going on here? I can't imagine a legit use case why they would force this besides a breach.
Re: LastPass Forced 2FA Reset
#3Hey, So i just got hit by this. Basically LastPass won't let you login anymore, unless you relink your 2FA with a new seed. Is there something going on here? I can't imagine a legit use case why they would force this besides a breach.
> Jun 16, 2023
It's also interesting that the article seems to have been updated/published (I can't seem to tell which) 2 days ago...
Re: LastPass Forced 2FA Reset
#4Hey, So i just got hit by this. Basically LastPass won't let you login anymore, unless you relink your 2FA with a new seed. Is there something going on here? I can't imagine a legit use case why they would force this besides a breach.
They were forcing more encryption rounds via a reset a while back. Unclear whether this is the same thing still or a new issue
Re: LastPass Forced 2FA Reset
#5I assume they are forcefully resetting MFA tokens for folks who did not read the full details of the hack and took appropriate action? One of the later iterations of the advisory regarding the hack stated token data was taken, requiring you to reset MFA.
Re: LastPass Forced 2FA Reset
#6I switched to Bitwarden a few months ago (after using LastPass for years) and haven't looked back. Would recommend.
While I'm sure Bitwarden has its own set of issues I'm unaware of... at least you can self-host it, it's open-source, and it sure doesn't seem to have constant security incidents/oddities like LastPass!
Re: LastPass Forced 2FA Reset
#7I wonder how much of that partially-obscured QR code is decodable by hand...