If you’re currently using LastPass, you should make sure you’re using a strong and unique master password that you haven’t shared with anyone. Since all of this information is secured by LastPass’s 256-bit AES encryption, the only way a hacker can access it is through a customer’s master password. Update December 2022: LastPass customers’ password vault information, including website usernames, passwords, secure notes, and form-filled data, was exposed during a major data breach in December of 2022. If you suspect you have received a phishing email, forward it to. Even if you do not use LastPass, you may still be targeted by these phishing attacks. If an email is suspicious, do not follow links, download attachments, or reply.

If you notice any unauthorized access or unusual activity, contact the account provider (not LastPass) immediately.īe aware that there is also an increased likelihood of phishing and social engineering attempts referencing LastPass that may try to trick you into following a link, downloading an attachment, or providing information. Monitor your accounts for fraudulent transactions.

This provides an extra layer of protection. If your master password already meets the default master password settings, no action is needed.Ĭhange the passwords for individual accounts in LastPass, prioritizing your email, financial, and UCSC accounts, if your passwords do not already consist of at least 12 characters.Įnable two-factor authentication for LastPass and individual accounts. Ĭhange your LastPass master password to a strong password with at least 12 randomly selected characters.22, LastPass notified its customers of a cybersecurity incident that may put passwords stored in LastPass at risk.Īlthough this incident was not specific to UC Santa Cruz, due to its severity, we recommend you take the following actions if you use LastPass:

Last pass security