# Hacked Passwords - LastPass

**URL:** <https://boards.straightdope.com/t/hacked-passwords-lastpass/695025>\
**Category:** In My Humble Opinion\
**Created:** [August 7, 2014, 12:27pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025 "2014-08-07T12:27:45Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Fool\_in\_the\_Rain](https://avatars.discourse-cdn.com/v4/letter/f/8491ac/32.png) [@Fool\_in\_the\_Rain](https://boards.straightdope.com/u/Fool_in_the_Rain)\
**Post date:** [August 7, 2014, 12:27pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/1 "2014-08-07T12:27:45Z")

</div>

With all the recent news of hackers getting millions (billions?) of usernames and passwords, I’ve gone around and changed all my passwords. One doesn’t realize how many passwords you have until you change them all at once.

I started looking around for a password manager and [PCMagazine](http://www.pcmag.com/article2/0%2c2817%2c2426798%2c00.asp#disqus_thread) reviews LastPass as one of the best. I’m considering purchasing the $12 a year subscription so I can use it across all my devices, but before I do, I was wondering if anyone has used it, and more specifically the premium service. Is it worth it? Easy to use? Is it effective?

What password manager do you use if not LastPass? What do you think of it?

Thanks in advance

---

<div class="post-metadata">

**Author:** ![The\_Librarian](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/the_librarian/32/402_2.png) [@The\_Librarian](https://boards.straightdope.com/u/The_Librarian)\
**Post date:** [August 7, 2014, 2:15pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/2 "2014-08-07T14:15:38Z")

</div>

I have always used keepass, it works on all platforms I use and (combined with dropbox) it is reasonably easy to synchronize. Oh, and it’s free.

---

<div class="post-metadata">

**Author:** ![DCnDC](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/dcndc/32/2842_2.png) [@DCnDC](https://boards.straightdope.com/u/DCnDC)\
**Post date:** [August 7, 2014, 2:27pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/3 "2014-08-07T14:27:22Z")

</div>

I use LastPass. I don’t use the premium service because I am in front of a computer 90% of every day, either at home or work, so I have no use for it on my phone (which as far as I can tell is the only added functionality of the premium service, but I could be wrong).

It’s very easy to use. There was that Heartbleed thing a little while back, but I personally was not affected and I changed all my passwords a couple of times since. It does everything I want it to do, and I feel like it’s at least as secure as any other similar option.

---

<div class="post-metadata">

**Author:** ![TroutMan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/troutman/32/6721_2.png) [@TroutMan](https://boards.straightdope.com/u/TroutMan)\
**Post date:** [August 7, 2014, 5:03pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/4 "2014-08-07T17:03:00Z")

</div>

Here’s a [previous thread](http://boards.straightdope.com/sdmb/showthread.php?t=712490) with some recommendations.

---

<div class="post-metadata">

**Author:** ![Raza](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/raza/32/213_2.png) [@Raza](https://boards.straightdope.com/u/Raza)\
**Post date:** [August 7, 2014, 5:43pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/5 "2014-08-07T17:43:20Z")

</div>

I have been using LastPass for at least two years; I can heartily recommend it. I do pay the $12/year, partly because I want to support them (and it’s cheap for the immense use I get from it), and once a month or so I find myself in a situation where I need to lookup a password on my phone.

One of the eye-opening features (and it’s one that it doesn’t force you to run) is its analyzer that can tell you if you are duplicating username/passwords across multiple sites.

You can also put non-site-specific stuff in their, like your safe combos, mistresses birthdays, whatever.

---

<div class="post-metadata">

**Author:** ![JohnT](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/johnt/32/15048_2.png) [@JohnT](https://boards.straightdope.com/u/JohnT)\
**Post date:** [August 7, 2014, 5:49pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/6 "2014-08-07T17:49:23Z")

</div>

> [@Fool\_in\_the\_Rain](#):
>
> With all the recent news of hackers getting millions (billions?) of usernames and passwords, I’ve gone around and changed all my passwords. One doesn’t realize how many passwords you have until you change them all at once.
> 
> I started looking around for a password manager and [PCMagazine](http://www.pcmag.com/article2/0%2c2817%2c2426798%2c00.asp#disqus_thread) reviews LastPass as one of the best. I’m considering purchasing the $12 a year subscription so I can use it across all my devices, but before I do, I was wondering if anyone has used it, and more specifically the premium service. Is it worth it? Easy to use? Is it effective?
> 
> What password manager do you use if not LastPass? What do you think of it?
> 
> Thanks in advance

I LOVE LastPass. Had a hard drive crash a few months ago and it made my life so much easier to deal with the problem.

Also, passwords are much more secure than they were in the days when I had 3-5 passwords that I would use interchangeably. Torture wouldn’t get my passwords from me as I no longer know them.

---

<div class="post-metadata">

**Author:** ![Ethilrist](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ethilrist/32/4604_2.png) [@Ethilrist](https://boards.straightdope.com/u/Ethilrist)\
**Post date:** [August 7, 2014, 5:52pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/7 "2014-08-07T17:52:54Z")

</div>

Any info on whether or not LastPass is included on the list of places they stole user IDs & Passwords from?

---

<div class="post-metadata">

**Author:** ![TroutMan](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/troutman/32/6721_2.png) [@TroutMan](https://boards.straightdope.com/u/TroutMan)\
**Post date:** [August 7, 2014, 6:01pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/8 "2014-08-07T18:01:12Z")

</div>

LastPass master passwords [were not stolen](http://blog.lastpass.com/2014/08/the-cybervor-data-breach-what-you-need.html).

> [@](#):
>
> While **your LastPass account is not affected** , if you have reused your master password on any other sites it is absolutely critical that you update it now.

ETA: to clarify, none of the passwords maintained by LastPass were stolen from the LastPass database.

---

<div class="post-metadata">

**Author:** ![Fool\_in\_the\_Rain](https://avatars.discourse-cdn.com/v4/letter/f/8491ac/32.png) [@Fool\_in\_the\_Rain](https://boards.straightdope.com/u/Fool_in_the_Rain)\
**Post date:** [August 7, 2014, 6:02pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/9 "2014-08-07T18:02:50Z")

</div>

The analyzer is a nice feature indeed **Raza** and looking up passwords occasionally on the phone is a plus for me.

Thanks **Troutman** for the link, Last Pass gets good reviews there too.

> [@JohnT](#):
>
> I LOVE LastPass. Had a hard drive crash a few months ago and it made my life so much easier to deal with the problem. \<snip\>

Nice to know!

It looks like LastPass it is. Thanks All.

---

<div class="post-metadata">

**Author:** ![Fool\_in\_the\_Rain](https://avatars.discourse-cdn.com/v4/letter/f/8491ac/32.png) [@Fool\_in\_the\_Rain](https://boards.straightdope.com/u/Fool_in_the_Rain)\
**Post date:** [August 7, 2014, 6:06pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/10 "2014-08-07T18:06:34Z")

</div>

> [@TroutMan](#):
>
> LastPass master passwords [were not stolen](http://blog.lastpass.com/2014/08/the-cybervor-data-breach-what-you-need.html).  
> ETA: to clarify, none of the passwords maintained by LastPass were stolen from the LastPass database.

Thanks for the heads up **Troutman**.

---

<div class="post-metadata">

**Author:** ![tellyworth](https://avatars.discourse-cdn.com/v4/letter/t/977dab/32.png) [@tellyworth](https://boards.straightdope.com/u/tellyworth)\
**Post date:** [August 7, 2014, 11:27pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/11 "2014-08-07T23:27:21Z")

</div>

> [@Fool\_in\_the\_Rain](#):
>
> One doesn’t realize how many passwords you have until you change them all at once.

Indeed - I have around 400 in my password manager.

LastPass, 1Password, and Keepass are all good options.

---

<div class="post-metadata">

**Author:** ![Krouget](https://avatars.discourse-cdn.com/v4/letter/k/b38774/32.png) [@Krouget](https://boards.straightdope.com/u/Krouget)\
**Post date:** [August 8, 2014, 1:20pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/12 "2014-08-08T13:20:22Z")

</div>

> [@Fool\_in\_the\_Rain](#):
>
> What password manager do you use if not LastPass? What do you think of it?
> 
> Thanks in advance

I use LastPass, both on my desktops and mobile devices, and love it.

Also, I’d recommend setting up 2-stage authentication where you can, or at least with the highly sensitive sites you use. I’d especially do so with LastPass, itself.

---

<div class="post-metadata">

**Author:** ![Ravenman](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/ravenman/32/2929_2.png) [@Ravenman](https://boards.straightdope.com/u/Ravenman)\
**Post date:** [August 8, 2014, 2:52pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/13 "2014-08-08T14:52:33Z")

</div>

I got Dashlane recently and I really like it. So much so I paid $30 for the premium subscription because, well, they made a really good product.

---

<div class="post-metadata">

**Author:** ![Fool\_in\_the\_Rain](https://avatars.discourse-cdn.com/v4/letter/f/8491ac/32.png) [@Fool\_in\_the\_Rain](https://boards.straightdope.com/u/Fool_in_the_Rain)\
**Post date:** [August 28, 2014, 4:02pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/14 "2014-08-28T16:02:47Z")

</div>

I know the thread is a little stale, but wanted to come back and thank those who recommended Last Pass. I’ve been using it the last three weeks, and it has been great. I used the analyzer to strengthen up some weaker passwords, and locked everything up nice and tight.

LastPass was an excellent investment

---

<div class="post-metadata">

**Author:** ![Raza](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/raza/32/213_2.png) [@Raza](https://boards.straightdope.com/u/Raza)\
**Post date:** [August 28, 2014, 5:44pm UTC](https://boards.straightdope.com/t/hacked-passwords-lastpass/695025/15 "2014-08-28T17:44:59Z")

</div>

Thanks for the update. Not only has LastPass goaded me into improving my security (through not re-using passwords, mainly), it has also saved me a few times when I’ve been away from my own PCs and needed a site password.
