4 ms·

From paying customer, to deleted account.

by Weryj 4y ago

prepend 4y ago
What’s the best way to delete an account? Overwrite all password values? Wait a month, overwrite again, wait a month, delete? It’s hard to tell what’s sufficient to reduce risk of someone who breaches in the future will use my data. I doubt LastPass deletes my data when I delete my account. I even wonder if to comply with GDPR, they just disassociate the data from me so it can never relink, but keep the data so it can be used, sold, or rented.
- sethammons 4y ago
  Best is to rotate all your stored passwords and not store the new ones in lastpass, delete all the items, and change the lastpass master password. Check any notes for sensitive info before overwriting and then deleting the entry and assume someone else will read what you had there.
- bigiain 4y ago
  > What’s the best way to delete an account? Overwrite all password values? Wait a month, overwrite again, wait a month, delete? The only sensible approach is to change every password on every site that you’ve ever stored credentials in LastPass for. Any attempt to change the passwords is just hoping hay their backups are better secured than their prod database (they are almost certainly not), and also that the data wasn’t popped before you changed them (which they almost certainly were, probably multiple times). Delete your account, but revoke/update all those passwords asap as well. Since the site/url and email addresses were not encrypted, I’d be changing the email address on at least critical accounts as well where I can.
- loudmax 4y ago
  For important accounts you should probably update your passwords. Assuming you aren't reusing passwords, you shouldn't need to track down every online store you once bought something from. But your should consider updating your passwords for bank accounts, Paypal, Amazon, Google and whatever else would be a major headache if it were compromised.
- slantedview 4y ago
  Since I went through this a month ago: - Migrate your vault to a new password manager - Rotate all your passwords and save the new ones in your new password manager - Delete your Lastpass account

From paying customer, to deleted account.

by Weryj 4y ago

From paying customer, to deleted account.

What’s the best way to delete an account? Overwrite all password values? Wait a month, overwrite again, wait a month, delete? It’s hard to tell what’s sufficient to reduce risk of someone who breaches in the future will use my data. I doubt LastPass deletes my data when I delete my account. I even wonder if to comply with GDPR, they just disassociate the data from me so it can never relink, but keep the data so it can be used, sold, or rented.

sethammons 4y ago
Best is to rotate all your stored passwords and not store the new ones in lastpass, delete all the items, and change the lastpass master password. Check any notes for sensitive info before overwriting and then deleting the entry and assume someone else will read what you had there.
bigiain 4y ago
> What’s the best way to delete an account? Overwrite all password values? Wait a month, overwrite again, wait a month, delete? The only sensible approach is to change every password on every site that you’ve ever stored credentials in LastPass for. Any attempt to change the passwords is just hoping hay their backups are better secured than their prod database (they are almost certainly not), and also that the data wasn’t popped before you changed them (which they almost certainly were, probably multiple times). Delete your account, but revoke/update all those passwords asap as well. Since the site/url and email addresses were not encrypted, I’d be changing the email address on at least critical accounts as well where I can.
loudmax 4y ago
For important accounts you should probably update your passwords. Assuming you aren't reusing passwords, you shouldn't need to track down every online store you once bought something from. But your should consider updating your passwords for bank accounts, Paypal, Amazon, Google and whatever else would be a major headache if it were compromised.
slantedview 4y ago
Since I went through this a month ago: - Migrate your vault to a new password manager - Rotate all your passwords and save the new ones in your new password manager - Delete your Lastpass account