Use the “passwords” feature to check if one of yours is compromised. If it shows up, never ever reuse those credentials. They’ll be baked into thousands of botnets etc. and be forevermore part of automated break-in attempts until one randomly succeeds.

  • Aetherion@lemmy.worldEnglish
    6·
    2 days ago

    LastPass is the maximum shit. They got hacked like 3 times in a year and my company‘s password notes got leaked.

    We are now with Bitwarden and this was the biggest security hardening measure we have taken.

    • kazerniel@lemmy.worldEnglish
      1·
      6 hours ago

      Yeah, I left LastPass after like 15 years when I’ve come across some news headlines that it had got breaches more than once while I was using it O.o

      Been a happy user of Bitwarden for a couple years now. I love that little “copy custom field name” function, so I don’t have to go hunting around in the HTML code if a site is using weird field names.

    • sugar_in_your_tea@sh.itjust.worksEnglish
      3·
      1 day ago

      Make sure whatever password manager you use doesn’t store the key on their servers. Bitwarden does this correctly (if you lose your PW, Bitwarden can’t recover it), and I’m sure some competitors do as well. LastPass apparently didn’t.