Years after having it as an option, LastPass finally enforces the requirement of setting a 12-character master password for existing accounts, this week.
The platform also started checking the new and old master passwords for possible matches with leaked credentials on the dark web and advises users accordingly. These changes ensure tight security for the online accounts of millions of LastPass users.
LastPass Master Password Requirement
LastPass, being one of the prominent password managers, has long been slack about it’s master password requirements. Though the company advises it’s users to set a master password of at least 12 characters, it didn’t mandate it till now.
While it started enforcing it for new accounts and reset passwords made after April 2023, older accounts are still vulnerable with weak master passwords. So, to secure them, LastPass is finally mandating the 12-character master password requirement for older accounts this week.
Announcement: In January 2024, LastPass will require all existing customers to use a master password with at least 12 characters. This policy will be implemented via a phased rollout. More: https://t.co/KjzpBC6l7Z pic.twitter.com/W64Hrb58bB
— LastPass (@LastPass) January 3, 2024
This aside, the company will also check the new or updated master passwords against a database of previously leaked credentials from the dark web, to ensure they weren’t been compromised in the past. If they do so, users will be prompted to select another password.
The company has already enforced a multi-factor authentication(MFA) re-enrollment process in May 2023, which made user accounts more secure, even though some experienced login issues initially.
All these measures are the direct result from two security breaches LastPass suffered in August 2022 and November 2022, where hackers compromised one of their developers laptop to gain internal access and steal the company data. This was later used to breach another engineer’s account, that led to the exposure of customer vault data!
Other Trending News:- News
