LastPass, the famous password manager, has published a note on his blog saying that a "suspicious activity" on its website has been identified . However, the company said its encryption measures have kept all the data of its users safely.
See also : Chrome for Mac OS X has been updated to improve the autonomy
"LastPass strengthens authentication hash with random salt and 100,000 cycles server side PBKDF2-SHA256, in addition to client-side cycles performed" wrote the CEO and founder of LastPass, Joe Siergrist. "With this additional reinforcement it is difficult to decipher the stolen hashes " , he continues.
Following the suspected breach, LastPass asks all users connecting from a new IP or a new device, check their e-mail, unless either two-factor authentication activated. LastPass also asks everyone to update their master password , which could be tranquilizer if you forgot your password now optional.
And to ensure that everyone will do this action in time, LastPass has sent an email to all its clients about this violation . Now it seems that the site has to manage a large wave of customers trying to keep their data secure, according to TechSpot .
On Monday afternoon, a server overload message was visible when you tried to change your master password . However, this does not mean you have to give up to follow the recommendations of LastPass, especially if the violation is worse than expected.
More fear than harm?
LastPass, headquartered in Virginia, does business in 71 countries around the world. In addition to the encrypted password, LastPass encrypts and decrypts information locally before synchronizing them. This allows you to keep your sensitive data on your device. "Security and privacy are our primary concerns here in LastPass" said Siergrist, reassuring customers in response to the violation.
As always, if you reuse your master password LastPass any other online service (which you should not do), then you should also change . This is obviously a worrying development for those who use LastPass, and we could see rivals such as Dashlane take the opportunity. However, the truth is that this is just a reminder that any online service, even if he should manage your data safe, can be hacked ...
See also : Chrome for Mac OS X has been updated to improve the autonomy
"LastPass strengthens authentication hash with random salt and 100,000 cycles server side PBKDF2-SHA256, in addition to client-side cycles performed" wrote the CEO and founder of LastPass, Joe Siergrist. "With this additional reinforcement it is difficult to decipher the stolen hashes " , he continues.
Following the suspected breach, LastPass asks all users connecting from a new IP or a new device, check their e-mail, unless either two-factor authentication activated. LastPass also asks everyone to update their master password , which could be tranquilizer if you forgot your password now optional.
And to ensure that everyone will do this action in time, LastPass has sent an email to all its clients about this violation . Now it seems that the site has to manage a large wave of customers trying to keep their data secure, according to TechSpot .
On Monday afternoon, a server overload message was visible when you tried to change your master password . However, this does not mean you have to give up to follow the recommendations of LastPass, especially if the violation is worse than expected.
More fear than harm?
LastPass, headquartered in Virginia, does business in 71 countries around the world. In addition to the encrypted password, LastPass encrypts and decrypts information locally before synchronizing them. This allows you to keep your sensitive data on your device. "Security and privacy are our primary concerns here in LastPass" said Siergrist, reassuring customers in response to the violation.
As always, if you reuse your master password LastPass any other online service (which you should not do), then you should also change . This is obviously a worrying development for those who use LastPass, and we could see rivals such as Dashlane take the opportunity. However, the truth is that this is just a reminder that any online service, even if he should manage your data safe, can be hacked ...