LastPass says employee's home computer was hacked to steal a decrypted vault
Reportedly via Plex
In brief: Password manager LastPass has revealed details of a breach last year that resulted in partially encrypted user login data being stolen. The company confirmed that the incident stemmed from a previous hack in August that enabled the hacker to steal credentials from a DevOps engineer's home computer and obtain a decrypted vault.
Two-Factor Authentication: Methods and Myths
When I mentioned to a few friends that I was writing a feature about two-step authentication, the typical response was an eye-roll and "Oh, that annoying thing?..." But wait. There's more to it.
How to Find Your Wi-Fi Passwords in Windows
Need to give someone your Wi-Fi password but can't find the key on the router? Use your Windows PC and our handy guide to uncover the hidden treasure.
You should change your password manager's clipboard settings now
Leaving passwords in the clipboard indefinitely could be dangerous
NortonLifeLock warns of password manager breach after failing to reject mass login attempts
Credential stuffing attack could impact thousands of accounts
The US Department of the Interior has a significant password issue
No "123456" passwords here but opsec is still very, very bad
The UK says sharing Netflix passwords is illegal, could be criminal fraud
But you probably shouldn't worry
Password-based hacks have increased 74% over the last year
There are almost 1,000 password-based attacks every second
Security researchers show off the RTX 4090's password cracking power
The new GPU significantly reduces the time required to obtain or recover user passwords
Microsoft extends brute-force attack protections to local Windows accounts
All Windows versions will be better protected against recurring login attempts
Google brings passwordless logins to Android and Chrome
Android and Chrome step up their support for the FIDO Alliance
Plex warns all users to change their passwords following a data breach
Emails, usernames and encrypted passwords were all compromised
Google significantly improves its password manager for Chrome on PC, Android, and iOS
New password generator and strength checker, uniform interface
Apple 'passkeys' support in macOS Ventura and iOS 16 promise a passwordless future
It's a feature on Apple devices, but works cross-platform
CEOs and other top executives use the same terrible passwords as other people
Shouldn't they know better?
Apple, Google, and Microsoft combine efforts toward passwordless logins
Simple, secure logins using FIDO
Password-recovery firm claims it can crack passwords on Macs with T2 security chip
Albeit the passwords must be short and already easy to recover using brute force
Make sure to avoid these categories when picking a password
Using a password manager would be the sensible option
The UK government wants to ban the use of default passwords on consumer electronics
The measure belongs to a bill aiming to protect customers from cyberattacks and support the rollout of gigabit broadband and 5G networks
The most common passwords of 2021 are outright embarrassing
Most of these weak passwords can be cracked in under one second
Microsoft adds a passwordless option for account access
Ditch the password on your Microsoft account
Your Google accounts will soon default to 'two-step verification'
There was an uproar that it would be mandatory, but Google clarified that is not the case
Chrome 88 arrives with improved password security features, tab search, more
Identifying weak and compromised passwords