Other password and credential lists are available on the dark web. You can download a 17GB password list comprising the 613 million most common passwords from haveibeenpwned, for instance. The LastPass password vaults have been in the hands of criminals for some time now, and even though they're encrypted, they will eventually be subject to brute force attacks.Īttackers will find their work easier thanks to the existence of massive databases of commonly used passwords.

No password hint is going to help if your password is 'lVoT=.N]4CmU'. However, LastPass is unique among password management services in that it allows users to set a password hint to remind them of their master password should they lose it.Įffectively, this encourages users to use dictionary words and phrases as part of their password, rather than a truly random strong password. When you log in to LastPass, you need your email address and master password to access your account. LastPass requires the master password to be a minimum of 12 characters, and recommends 'that you never reuse your master password on other websites.' What is the LastPass master password The master password is the password that you are prompted to create when you initially sign up for your LastPass account.

Lastpass generated password