These letters can be fake, that’s why it’s better to enter the url manually in your browser’s address bar.

Do not to click links in e-mail letters which claim they are from LastPass.

It would be absolutely great if you could enable it on other websites as well, e.g.

Follow official recommendations: Change your master password and enable multi-factor authentication.

Here is what we can recommend to LastPass users: #LastPass users need to change their #passwords immediately Tweet What stops cybercriminals from spamming LastPass users with fraudulent letters, disguised as official ones? When people receive an unsuspicious email with warnings and recommendations from the “developers”, they can readily follow a link to change their master password - and give it right to the cyber criminals’ hands. For example, LastPass is advising users to change their master passwords.

Being armed with the list of real email addresses hackers can create a targeted phishing campaign to defraud the lacking data. Other researchers consider that the breach can lead to a new wave of malicious activity aimed directly at LastPass users. We've updated the blog with follow-up information to user questions about yesterday's announcement: Some researchers support this position, declaring there is no risk for users with strong passwords. CEO and founder of LastPass Joe Siegrist claims that the incident will not influence “the vast majority of users”. Still, potential consequences of the breach seem to be dubious. To the hackers’ benefit, many large companies try keeping breaches a secret, but not here. Let’s give credit to the company: When LastPass found the breach, it quickly released a public warning. Nevertheless, LastPass recommends users change their LastPass master passwords and enable multi-factor authentication. The passwords themselves were not compromised, as the service doesn’t store them in its cloud. Attackers compromised user email addresses, password reminders, per-user salts and authentication hashes.

LastPass, a popular password manager, has recently disclosed a network breach. In that instance, by discrediting a single password, cyber criminals can receive access to invaluable information, including banking credentials. It is a very convenient tool – unless it is hacked. An online password manager can make your life much easier by automatically entering individual passwords for each website and service you visit.

Master password reset by admin lastpass