LastPass Account Got Hacked? Here Is The Safety Guide

LastPass, the online login credentials safety vault was hacked yesterday and the team notified the issue to their users through an email. The email says,

“We wanted to alert you that, recently, our team discovered and immediately blocked suspicious activity on our network. No encrypted user vault data was taken, however other data, including email addresses and password reminders, was compromised.

We are confident that the encryption algorithms we use will sufficiently protect our users. To further ensure your security, we are requiring verification by email when logging in from a new device or IP address, and will be prompting users to update their master passwords.

We apologize for the inconvenience, but ultimately we believe this will better protect LastPass users. Thank you for your understanding, and for using LastPass.

Regards,
The LastPass Team”

They are pretty much confident about their encryption algorithms in protecting their users. However, they recommend the users to update their master passwords.

Besides updating the master password, there are certain things that you better know about, to ensure more security of your LastPass account.

1. LastPass, as they claim, implements very good encrypting algorithms to secure their users accounts. They have intelligently designed cyber attack response system which raised the alarms this time.
2. LastPass don’t have access to users’ master password. They use numerous rounds of complexity to their hash algorithms making them difficult to be hacked.
3. The guess attacks will not crack LastPass’s algorithms. The unique string inclusions in encrypting the algorithms helps them keep these kind of attacks go ineffective in the beginning itself.
4. Though the attacker guesses your weak master password, you data vault will not be exposed to him. He then will be asked to complete email verification(because login from a new IP address or location triggers the security breach alarms and activates the counter measure instructions).
5. Do not use your master password for any other website.
6. Enable multifactor authentication for your LastPass account for added security features. To enable so, go to your LastPass vault > Account Settings > Multifactor Options.
7. Never disclose your master password even to LastPass team.
8. Check LastPass security updates on their blog. Emails might be misleading.