Many LastPass users have recently reported strange login attempts using their LastPass master passwords. Some users on the Hacker News forum shared that they have received notification emails about a blocked login attempt made from a foreign country using their LastPass master password.
LastPass claimed in a statement to AppleInsider that there is no evidence that accounts were accessed successfully or that the LastPass service was hacked. According to the company, the attacks came from credential stuffing, which is a malicious attempt to access user accounts using credentials obtained from breaches on other websites or services.
Meghan Larson, a spokesperson from LastPass, said, “We regularly monitor for this type of activity and will continue to take steps designed to ensure that LastPass, its users, and their data remain protected and secure.”
If you are using LastPass, it is recommended that you change your master password. However, some customers have reported suspicious activity, even after changing their master password. It’s also recommended to turn on two-factor authentication to further enhance your security.
LastPass is a password manager available for desktop and mobile devices. LastPass saves all of your passwords in a vault that can be accessed only with a master password. It is this password that users believe has been hacked. LastPass is offered for free with limited functionality or for a monthly subscription that gives you access to all of the service’s features.
