Password managers are not immune to security compromises, as past incidents like LastPass show.
This guide outlines the key steps to take following a vault breach, from reading incident notices and changing master credentials to signing out sessions and hardening MFA.
If you ever receive a notification that there has been a leak from your own program provider, there are specific steps you should take immediately.
What to do if your password storage service is compromised
A breach notification doesn't automatically mean someone has managed to get into your accounts. However, because research shows that more than one in three people use the same passwords everywhere and few use such programs, it's a good idea to act quickly by following these steps:
Read the notice carefully to find out exactly what was stolen.
Change your master password immediately. Create a new password that is long, unique, and completely different from what you've been using.
Disconnect from everywhere and check your devices. Look at the list of connected devices, remove any you don't recognize, and see if any settings have been changed.
Change your most important passwords. Start with email, banking, and financial services, treating all of your storage as exposed.
Enable additional authentication. Use a code generator app, digital keys, or hardware devices instead of just text messages.
Watch out for scams. Victims of similar incidents are often targeted by messages impersonating the program company.
If you want, you can export your data and change provider at any time, as long as you remember to permanently delete the text files that will be created on your computer.
>Stay connected with Hacks.gr
Set us as a preferred source on Google and find us on social media.
Preferred source
↗
end of article
Top comments (0)