news.volyx.in

LastPass users warned their master passwords are compromised (bleepingcomputer.com)

559 points by markplindsay · 1725 days ago · 316 comments on HN

Article summary

The article appears to discuss a security issue with LastPass, a password manager, where some users' master passwords may have been compromised. The exact nature of the issue is unclear, but it has sparked a discussion about password security and the use of password managers. Some users are concerned about the potential risks of using cloud-based password managers, while others prefer the convenience they offer. The article's details are not available, but the comments suggest that the issue may be related to a breach or a vulnerability in the LastPass system.

Main themes

  • password security
  • cloud-based vs self-hosted password managers
  • convenience vs security
  • breach response and transparency
  • password manager implementation and user behavior
  • alternative password management solutions

What commenters say

  • Some users believe that self-hosting a password manager is the most secure option, while others think it is too complicated for average users.
  • Cloud-based password managers are convenient, but may be more vulnerable to security risks, such as compromised updates or supply-chain attacks.
  • Using a local password manager, such as KeePass, can be a good alternative to cloud-based solutions, but may require more technical expertise.
  • The security of a password manager depends on various factors, including the user's behavior and the implementation of the manager, rather than just its hosting model.
  • Some users prefer to use built-in password managers, such as those in browsers, while others prefer standalone solutions.
  • The trade-off between convenience and security is a key consideration when choosing a password manager.
  • Transparency and incident response are important factors in trusting a password manager provider, especially in the event of a breach.
  • Different users have different needs and preferences when it comes to password management, and there is no one-size-fits-all solution.