Lastpass hacked again!

andy_mk3 · 5 Mar 2023 at 11:51

This has reminded me to do something I keep forgetting to do.

I use Bitwarden now. I am going to have somewhat of a self security audit though. Enable 2FA and set randomised passwords on important things.

Cromulent · 6 Mar 2023 at 15:18

andy_mk3 said:
This has reminded me to do something I keep forgetting to do.

I use Bitwarden now. I am going to have somewhat of a self security audit though. Enable 2FA and set randomised passwords on important things.

Get a Yubikey.

Edit: And get Bitwarden Premium for £10 a year and use your Yubikey with that as well.

Deleted member 77746 · 6 Mar 2023 at 15:27

Cromulent said:
Get a Yubikey.

Edit: And get Bitwarden Premium for £10 a year and use your Yubikey with that as well.

What happens if you lose the Yubi Key?

VaderDSL · 6 Mar 2023 at 15:31

GaryTheSnail said:
What happens if you lose the Yubi Key?

If you don't have recovery codes or other login option (depending on what the service offers) then you're locked out forever.

Cromulent · 6 Mar 2023 at 15:32

GaryTheSnail said:
What happens if you lose the Yubi Key?

Lost Secondary Device | Bitwarden Help Center

If you have lost the two step device that enables you to unlock your Bitwarden password manager, learn what you can do if you have a saved recovery code to access your account.

bitwarden.com

andy_mk3 · 6 Mar 2023 at 15:41

Cromulent said:
Get a Yubikey.

Edit: And get Bitwarden Premium for £10 a year and use your Yubikey with that as well.

I have both already

Deleted member 77746 · 6 Mar 2023 at 16:06

Isn’t a yubikey kinda like a phone anyway in terms of needing that said device to log in. I think a phones a bit more convenient for me over the key. There’s no extra cost either but there is with a physical key.

Orcvader · 6 Mar 2023 at 16:27

GaryTheSnail said:
Isn’t a yubikey kinda like a phone anyway in terms of needing that said device to log in. I think a phones a bit more convenient for me over the key. There’s no extra cost either but there is with a physical key.

Not to mention it's smaller too, I feel like I would more easily lose that.

Deleted member 77746 · 6 Mar 2023 at 16:29

Orcvader said:
Not to mention it's smaller too, I feel like I would more easily lose that.

I would have it on my keys and I've always got my keys on me, unless I lose them ofc.

mrk · 7 Mar 2023 at 23:27

Just use Firefox to store your logons, and MS Auth app for all 2FA. Been using both for years and years and never a problem. Firefox even tells you inside the browser if any of your saved logons were part of a breach and can then go in and update it with a new random one directly.

ChrisD. · 8 Mar 2023 at 06:23

But that means having to use Firefox.

mrk · 8 Mar 2023 at 06:37

Which is the best part about it

Semple · 8 Mar 2023 at 06:45

ChrisD. said:
They haven’t been good for years.

I think they started to go downhill when the company behind logmein bought them (iirc)

Deleted member 77746 · 8 Mar 2023 at 06:46

Semple said:
I think they started to go downhill when the company behind logmein bought them (iirc)

I agree I don’t recall issues before this.

ChrisD. · 8 Mar 2023 at 07:10

Semple said:
I think they started to go downhill when the company behind logmein bought them (iirc)

Yup, Log Me In from memory had questionable privacy information and had been in the news for poor security, it's when I jumped ship.

Casdawer · 8 Mar 2023 at 12:06

Tried creating an account with BitWarden however I can't login as it tells me my username/password is incorrect.

Tried with 2 accounts, same password (copied to notepad so I wasn't going insane) and it's said the same thing.

No email from BitWarden to verify the account so I have no idea what's going on.

VaderDSL · 8 Mar 2023 at 12:22

Casdawer said:
Tried creating an account with BitWarden however I can't login as it tells me my username/password is incorrect.

Tried with 2 accounts, same password (copied to notepad so I wasn't going insane) and it's said the same thing.

No email from BitWarden to verify the account so I have no idea what's going on.

You may have typed your email address in incorrectly? I have just made an account and it went through fine, either that or the Captcha didn't work and the account was never created in the first place. Possibly you have something blocking the Captcha which needs completing to allow you to create the account?

Casdawer · 8 Mar 2023 at 13:57

VaderDSL said:
You may have typed your email address in incorrectly? I have just made an account and it went through fine, either that or the Captcha didn't work and the account was never created in the first place. Possibly you have something blocking the Captcha which needs completing to allow you to create the account?

I never got a Captcha so that's probably what it was!

Switched of ABP and the Captcha did appear so very random why ADB would have stopped that....

Anyway, account created now!

Orcvader · 8 Mar 2023 at 14:18

Casdawer said:
I never got a Captcha so that's probably what it was!

Switched of ABP and the Captcha did appear so very random why ADB would have stopped that....

Anyway, account created now!

Swap over from ABP to uBlock Origin, it comes with an "unbreak" filter list that usually gets around this if the default filter lists blocks too much.