Comment on More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user

SeducingCamel@lemm.ee ⁨9⁩ ⁨months⁩ ago

• ultratiem@lemmy.ca ⁨9⁩ ⁨months⁩ ago

  Are you not worried your vault is still on their servers? I feel most companies don’t delete shit. Most have ways to get around it saying they keep some info for taxes, accounting, etc.

  I wouldn’t sleep well knowing my passwords where on there at any given time.

  source

  • learningduck@programming.dev ⁨9⁩ ⁨months⁩ ago

    You can host a bitwarden vault yourself. They open sourced and audited. So, trustworthy that there’s no back door somewhere to some degree.

    source

    • PixxlMan@lemmy.world ⁨9⁩ ⁨months⁩ ago

      I suspect they’re referring to LastPass?

      source

      • learningduck@programming.dev ⁨9⁩ ⁨months⁩ ago

        Ah, make sense. I thought they asked about using Bitwarden’s server.

        source
  • SatyrSack@lemmy.one ⁨9⁩ ⁨months⁩ ago

    So just change whatever passwords you had saved to LastPass. That would mitigate any issues, right?

    source

    • CoderKat@lemm.ee ⁨9⁩ ⁨months⁩ ago

      Pretty much. Though also any security questions or other private info you have saved, some of which is much more annoying to protect.

      Though one annoying thing is that even if you change everything, what they find might help them social engineer an attack.

      source
    • 10EXP@sh.itjust.works ⁨9⁩ ⁨months⁩ ago

      Your username gives me PTSD for past Hades speedruns and I hate it.

      source
    • ultratiem@lemmy.ca ⁨9⁩ ⁨months⁩ ago

      Just. It’s not an insurmountable problem, but I wouldn’t be happy changing the login details, one by one, on the some 80 websites I have in my vault.

      Not to mention if you’re using an email anonymizer, you’ll have to regenerate new emails for them all too. I guess you could do it on demand, but knowing my batch of emails in floating around the dark web doesn’t sit well with me. Worse yet if it’s your actual email, then they have that now.

      source
  • qaz@lemmy.world ⁨9⁩ ⁨months⁩ ago

    It’s e2e and the code to do so is opensource, and you can always host Vaultwarden yourself.

    source
• sealhaslupus@lemmy.world ⁨9⁩ ⁨months⁩ ago

  same here. nuked my lastpass account and switched everything over to bitwarden. their paid offering was worse from the competition and now i’m very glad i moved from them

  source

  • reagansrottencorpse@lemmy.world ⁨9⁩ ⁨months⁩ ago

    Was it a huge pain in the ass moving over or fairly painless? I need to do this.

    source

    • zondo@lemmy.world ⁨9⁩ ⁨months⁩ ago

      Not painless at all. IIRC, I just exported from LastPass and imported (without change) to BitWarden. It worked fine.

      source