With a good password, it could take hundreds or even millions of years to get the right combination. However, with the vaults now in the hands of hackers, it’s possible they could use brute force to guess the right password.Īs long as you never reused your password and followed LastPass's best practices for password creation, the company says you should be safe. This data is protected by users’ master passwords, which LastPass doesn’t store on any of its own servers. LastPass says that while these copies include some unencrypted fields, like website URLs, other sensitive information such as usernames and passwords are encrypted.

However, the hackers then used this data to compromise the account of a LastPass employee, and they were subsequently able to obtain backup copies of user vaults. Back then, LastPass said that user data was unaffected and that the hackers only gained access to a testing environment. The revelation is related to the August incident, where hackers stole LastPass source code and further data.

LastPass published a blog post detailing the incident ( via TechCrunch).

Last pass my vault