3 ms·
LastPass will enforce a 12-character minimum master password
- cranberryturkey 3y agostupid. what about shitty sites that requires < 12 characters?
- kozak 3y agoThis is only about the master password. I assume it won't have any stupid requirements like "include at least one digit", and will instead assess the amount of entropy, allowing passphrases to be used.
- barteke22 3y agoMaster password requirements are: Strength meter at maximum. At least 12 characters long. At least 1 number. At least 1 lowercase letter. At least 1 uppercase letter. At least 1 special character. Not your email.
- elmerfud 3y agoI despise companies that do this kind of nonsense to exercise their view of "security" over me. They are the ones that are suffering the data breaches not me. Perhaps it's because they're a bigger target or perhaps it's their failure at basic security. This idea that they have of security theater and imposing their view of security theater instead of actually implementing real security on their side and optionally giving the customers tools to be secure. Companies that respect their users give their users the tools to do things right but don't dictate what right is for all users. This is just a way for them to act like they are more secure than they really are because it would never make the news if someone's three character password with no two-factor was breached because it's simply one account and everyone would understand it wasn't LastPass that had the failure it was the user.
- 8organicbits 3y agoIt sounds like this increases the minimum from 8 to 12 for old accounts that previously used short passwords. For a master password protecting a password manager, often without 2FA, the a minimum of 8 characters doesn't make sense. Although honestly LassPass should have lost all trust long before this and anyone still using it should switch.