How to Audit and Update your Passwords

[twesterm]

Rainbird said:

twesterm said:

There are three key differences here between this and the PSN hack.

• LastPass does the smart thing and actually encrypts the things it stores
• They do not have your master password
• If you try to log into someone's LastPass from a new site, you must input the master password

This isn't on anywhere near the same scale as the PSN hack because LastPass actually did things correctly.

Plus, if you're paying for the service, you can use Sesame, which generates a one time password that needs to be entered before you can log on too. If you have both that and a strong master password, I don't think there's anything to worry about.

Yeah, as far as security breaches go this one is pretty mild.  At worst someone else now has my email address.