More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user

L4sBot@lemmy.worldmod to Technology@lemmy.world – 971 points –
LastPass security breach linked to $35 million stolen in crypto heists
theverge.com

More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user::Security experts believe some of the LastPass password vaults stolen during a security breach last year have now been cracked open following a string of cryptocurrency heists

188

You are viewing a single comment

Yes, if you write the decrypted file to disk, it could be recovered. Deleting files only removes the file system entries - it does not wipe the content.

Use a local password manager. KeePass (use the KeePassXC variant on Linux) is the most popular choice. If you prefer a command line tool, pass (passwordstore.org) is an option.

Thanks, great point. Lots of suggestions for KeePass here, so I'll definitely look into it. I appreciate the command line tool recommendation as well, as that's my preference. Cheers!

1 more...