6 ms·

After reading this, I acted on a decision I was on the fence about. I already have moved to Bitwarden and like it a lot better, but this post prompted me to go

After reading this, I acted on a decision I was on the fence about. I already have moved to Bitwarden and like it a lot better, but this post prompted me to go into LastPass and actively delete my account. The next thing to do will be to start changing passwords. As with most of us, that's a project of serious scope that I do not look forward to.

barbazoo 4y ago
I switched to 1Password a long time ago but never deleted my LP account unfortunately. Did so this week, AFTER the recent breach.
joegahona 4y ago
> As with most of us, that's a project of serious scope that I do not look forward to. I've spent the better part of the past three days doing just this. Get some good music and some good coffee, and it can actually be pretty cathartic. I enjoyed the hygiene exercise much more than I thought I would.
- cmurf 4y ago
  Some accounts I'm just deep sixing by changing the password with the online service but then not recording it anywhere. Buhbyeeeee!
  - joegahona 4y ago
    Yes! I too have had many sites fall into that category. Also it's been a fascinating exercise in user-interface/-experience competitive research. Some websites just do not give a crap. Here's one gem: https://i.imgur.com/yBLmuHt.png https://i.imgur.com/yBLmuHt.png I can't help but feel pity for the local/city-level websites though. You can tell they've just Frankenstein-d stuff together on meager budgets and under crippling administrative loads.
dqv 4y ago
So I've been doing this and I strongly recommend keeping LastPass (LP) until you've deleted all your credentials from there. My workflow is to launch the login from LP (using the app), use those credentials, and change the passwords using Bitwarden. Otherwise, you might accidentally set a new password that doesn't actually work and have to go through painful password reset processes.
danShumway 4y ago
Same boat. I'm mentally kicking myself having moved off so long ago but not having taken the final action that would have prevented me from being caught up in this breach at all. When I first moved off I didn't want to close the account just in case something went wrong with the transition. But after it was clear that the transition was fine, then I should have gone back and just finished up the final step. I probably needed to do a full account cleanup anyway at some point, but I just wish I had been slightly more proactive about deleting my data. It's a good lesson to learn, I'm thinking that as part of the account cleanup I should also take a look at what other accounts I have lying around that are unnecessary.
jve 4y ago
I'v migrated maybe 2 years ago and deleted LP account. But I'm now wondering if that delete REALLY wiped off my account? Including some long-term backup or something? Has anyone asked LastPass? Anyone here with internal knowledge? I may never find out for sure, even if I ask LastPass...

barbazoo 4y ago

I switched to 1Password a long time ago but never deleted my LP account unfortunately. Did so this week, AFTER the recent breach.

joegahona 4y ago

> As with most of us, that's a project of serious scope that I do not look forward to. I've spent the better part of the past three days doing just this. Get some good music and some good coffee, and it can actually be pretty cathartic. I enjoyed the hygiene exercise much more than I thought I would.

cmurf 4y ago
Some accounts I'm just deep sixing by changing the password with the online service but then not recording it anywhere. Buhbyeeeee!
- joegahona 4y ago
  Yes! I too have had many sites fall into that category. Also it's been a fascinating exercise in user-interface/-experience competitive research. Some websites just do not give a crap. Here's one gem: https://i.imgur.com/yBLmuHt.png https://i.imgur.com/yBLmuHt.png I can't help but feel pity for the local/city-level websites though. You can tell they've just Frankenstein-d stuff together on meager budgets and under crippling administrative loads.

dqv 4y ago

So I've been doing this and I strongly recommend keeping LastPass (LP) until you've deleted all your credentials from there. My workflow is to launch the login from LP (using the app), use those credentials, and change the passwords using Bitwarden. Otherwise, you might accidentally set a new password that doesn't actually work and have to go through painful password reset processes.

danShumway 4y ago

Same boat. I'm mentally kicking myself having moved off so long ago but not having taken the final action that would have prevented me from being caught up in this breach at all. When I first moved off I didn't want to close the account just in case something went wrong with the transition. But after it was clear that the transition was fine, then I should have gone back and just finished up the final step. I probably needed to do a full account cleanup anyway at some point, but I just wish I had been slightly more proactive about deleting my data. It's a good lesson to learn, I'm thinking that as part of the account cleanup I should also take a look at what other accounts I have lying around that are unnecessary.

jve 4y ago

I'v migrated maybe 2 years ago and deleted LP account. But I'm now wondering if that delete REALLY wiped off my account? Including some long-term backup or something? Has anyone asked LastPass? Anyone here with internal knowledge? I may never find out for sure, even if I ask LastPass...