Instead, it's suspected that a leak through a third party was responsible for the spillage of master passwords, like keylogging malware on users' computers. LastPass flagged and denied the attempts because of their unusual geographic location and, just like this time, maintained that its servers were unaffected. Now click the blue Import data button and after a short wait, you should see all your logins appear in a list. The company’s servers recorded suspicious activity in December 2021 where the correct master passwords were used to attempt logging into several customer accounts. Use the drop-down menu to select LastPass, then click the Choose file button and navigate to your saved lastpassexport.csv file. We couldn’t help but notice this isn’t LastPass’ first encounter with bad actors. there are some forms that lastpass would get right all.

The company adds that users don’t need to take any remedial action at this point. I have used LastPass, 1Password, Bitwarden, and Strongbox, and in my opinion, LastPass is lacking compared to 1Password. The company says LastPass services continue to operate normally and customer data as well as encrypted password vaults remain unaffected by the breach. It also sought the services of an unnamed cybersecurity firm to prevent such events in the future. As a boilerplate response, the company started an investigation (which is still underway) and deployed mitigation measures. LastPass CEO Karim Toubba says the company uncovered a breach where bad actors gained access to portions of the company’s source code and proprietary technical information through a single compromised developer account.

Bitwarden lastpass