I've been a LastPass user for a few years and I use the browser extension everyday. As an admin of several websites, the the extension has been a time saver.
I thought I had no illusions about the inherent insecurity in using LastPass, but I guess I was wrong. I use Yubikey and disabled autofill long ago, but I was still vulnerable. Their response to these exploits is maddening.
"Our investigation to date has not indicated that any sensitive user data was lost or compromised."
This when they can't verify if passwords were compromised as LastPass servers weren't involved in this exploit.
So I guess I need to switch to a different service. Any suggestions?
I thought I had no illusions about the inherent insecurity in using LastPass, but I guess I was wrong. I use Yubikey and disabled autofill long ago, but I was still vulnerable. Their response to these exploits is maddening. "Our investigation to date has not indicated that any sensitive user data was lost or compromised." This when they can't verify if passwords were compromised as LastPass servers weren't involved in this exploit.
So I guess I need to switch to a different service. Any suggestions?