Company I worked for got hacked so they gave us free Equifax for a year, Equifax got hacked so they upgraded us to lifetime membership and my company felt so guilty they gave us LastPass for a year, then LastPass got hacked, again and again. I feel like I got privacy herpes.

LastPass has been hacked so many times, I genuinely have no idea how they're still in business.

LastPass...again.

At least it's just salesforce data and not actual vaults and secrets.

I moved away from these guys a long, long time ago when they started upping subscription costs.

Again? It happens a lot to them.

I selfhost Vaultwarden on my server. I use the Bitwarden client to access my passwords.

lastpass is already on my 'stay far away from' list, and have been on it for years:

https://en.wikipedia.org/wiki/LastPass#Security_incidents

I heard thr saying, "LastPass is the Last Password manager you should ever use". That was like, what, three breaches ago?

The Klue supply chain attack was claimed by the Icarus extortion group, who compromised the infrastructure of the AI-powered market intelligence platform and stole OAuth tokens that connected customers' Salesforce environments.

At least someone is finding good use for AI lol

Thats not so bad. I swear sales is always a magnet for this shit. They constantly insist on integration with the most dogshit slop products.

Haven't used Lastpass since the logmein deal rubbed me the wrong way, went to dashlane for many years but they had some security scares just recently. now I self host Vaultwarden, which is a bitwarden compatable server.

for maximum security I could have it local only and connect to it via VPN directly, but I put it behind nginx, with SSL, fail2ban with only my IPs whitelisted and a geofilter on top of that. so even if someone did manage to make it to the login page of the admin panel, they'd need a 30 digit passphrase and an email address username that only exists for that one application, get it wrong once and you are blacklisted.

Left for BitWarden after the first major breach. Sad. Such a good start back in the day.

A separate mention should be made of PearPass. It is a new password manager, direct synchronization between devices without central cloud storage, store data locally on your devices and apps for major platforms.

PearPass as an interesting new option worth keeping an eye on.

Bro, again? Corporate sales must be dirt cheap.

keepass

LastPass still exists? Damn

Ouch, not the first time for LastPass, probably not the last. Found info, they had 7 breaches total since 2011?? Ouch, that's almost every other year!

https://thebestvpn.com/statistics/how-many-times-has-lastpass-been-hacked/