Password Managers
… News LastPass 'digital will' phishing attack uses fake death certificate emails These fake emails claim that someone has uploaded your death certificate. …
Tracked topic
RoboForm allows you to import passwords from your browser or another service, with good accuracy—and instant flagging of common weak passwords. For my sample set of imported passwords (about two dozen), saved to CSV, the data came through intact. RoboForm also immediately marked entries with bad passwords like “password” and “123456” with red warning symbols. For direct importing, RoboForm can pull from LastPass, Bitwarden, Dashlane, 1Password, Keeper, NordPass, True Key, Enpass, Kaspersky, Proton Pass, and Myki. For all other services and apps, you can export to CSV and then import that file
I like this password manager's simplicity, but not its buried flawsRoboForm encrypts data using AES256 bit encryption with PBKDF2 SHA256, with a default of 100,000 iterations. This default makes RoboForm less secure than popular rivals like Bitwarden and 1Password, which use 600,000 and 650,000 iterations (respectively)—a number based on the Open Worldwide Application Security Project’s current recommendations. Even LastPass now sets its default to 600,000—a move it eventually took after being lambasted for its low iterations. (This lapse in increasing iterations on all accounts is likely a strong contributing factor to hackers successfully breaking into use
I like this password manager's simplicity, but not its buried flaws… News LastPass 'digital will' phishing attack uses fake death certificate emails These fake emails claim that someone has uploaded your death certificate. …
… Head to www.LastPassSettlement.com to file.
… Even LastPass now sets its default to 600,000—a move it eventually took after being lambasted for its low iterations. This lapse in increasing iterations on all accounts is likely a strong contributing factor to hackers successfully breaking into user accounts after stealing LastPass vault data. …
… The good The bad The helpful Tip of the week LastPass isn’t the only company who’s lost a settlement lawsuit—Comcast aka Xfinity is also having to pay customers whose data was lost in a 2023 breach. …
… The WhatsApp campaign spreading malware is easily dodged, but as the latest LastPass-related breach shows, you can’t control the spread of information through third-parties. …
… We review LastPass, Dashlane, Keeper, NordPass, and others to find the best one for managing passwords. …
… Other password managers tested One notable service missing from our list is LastPass, which experienced a major breach in 2022. …
… Lastpass used to be popular but has suffered from too many breaches of its own for us to recommend. …
… Moreover, they've continually been updating their services, with Google recently enabling cross-device use of passkeys saved to its password manager, and Apple releasing a free standalone Passwords app meant to compete with Bitwarden, LastPass, and other dedicated password managers earlier this yea… …