#Lastpass changes reddit password#

I suspect you installed a malicious app that somehow targeted your web browser's LastPass extension, modifying it to send your master password to these fine people. someone also said that LP used their own self-baked encryption, not standard. Long story short: It sounds like all of you got phished. Use it at the command line (including as a git credential helper) or through one of the many available GUI implementations: Pass for iOS.

Use common Unix tools (fully works in Windows too, though) such as your file system, git, and gpg for storage, syncing, and encryption.

I saved the sites to disk as I went, but I doubt these dumps will tell you much. Details: Everything open source everywhere. Trying to keep such a mechanism working is very labor intensive unless the target site cooperates, in which case it'd be much MUCH better if say amazon had a dedicated stable change-password API.

#Lastpass changes reddit how to#

When I tried to visit again just now, it just says 'something went wrong' (on the first site) and 'Access denied' (on the second site). The LastPass 'auto change' just means someone programmed in how to navigate the change-password process in a browser. Clicking on the alert takes you to a page where Logmein is trying to upsell premium credit monitoring. Now, the interesting part is that this phishing attempt only happened once. A Critical Change has just been detected on your credit report that may be an indicator of identity theft LastPass occasionally sends alarming credit alerts like this. I went through and answered the 'questions', and it tried to take me to the actual phishing site: They dynamically inserted my ISP's logo (Spectrum) and tried to do a phishing attempt: When you go to that hostname, it's one of the best phishing sites I've ever seen. So I don't know if this means anything, but I was googling for the IP address and wound up at which says hostname:. Its appearing that a password list was recently sold off which explains the time gap. In the hackernoon article above, he states that the values starting with a '' are encrypted. Further in the discussion it appears the users were phished during the time of the LastPass exploit 5 years ago. In the Request tab, you will see all the parameters sent by the request, in particular 'name' 'extra' 'grouping' 'url' 'username' 'password and possibly 'hexName' (for Secure Notes).