Your sensitive vault data, such as usernames and passwords, secure notes, attachments, and form-fill fields, remain safely encrypted based on LastPass’ Zero Knowledge architecture. “If you use the default settings above, it would take millions of years to guess your master password using generally-available password-cracking technology. This is the first time they’ve acknowledged that client data was at risk. In this update from they admit that they believe 256 bit AES encrypted client password vaults were stolen from the 3rd party. 30th in which their monitoring identified a new breach (tied to their Aug. LastPass released new information on their latest breach announcement from Nov. 23rd 2022: CyberHoot LastPass Breach Update: My Master Password was so long and complex that the cracking effort required according to this website’s Password Strength Meter was: 7 quadrillion years whew! That’s a relief. Will we cancel and re-issue our credit cards? Speaking personally now, I will not.

We stored our Credit Card information in LastPass for Form Filling ease of use.

They have some helpful comments and insights. Naked Security has this article detailing their take on the LastPass breach and admission that encrypted vaults were stolen.

Lastpass two factor