3 ms·
I despise companies that do this kind of nonsense to exercise their view of "security" over me. They are the ones that are suffering the data breaches not me. P
by elmerfud 3y ago
I despise companies that do this kind of nonsense to exercise their view of "security" over me. They are the ones that are suffering the data breaches not me. Perhaps it's because they're a bigger target or perhaps it's their failure at basic security. This idea that they have of security theater and imposing their view of security theater instead of actually implementing real security on their side and optionally giving the customers tools to be secure.
Companies that respect their users give their users the tools to do things right but don't dictate what right is for all users. This is just a way for them to act like they are more secure than they really are because it would never make the news if someone's three character password with no two-factor was breached because it's simply one account and everyone would understand it wasn't LastPass that had the failure it was the user.
- 8organicbits 3y agoIt sounds like this increases the minimum from 8 to 12 for old accounts that previously used short passwords. For a master password protecting a password manager, often without 2FA, the a minimum of 8 characters doesn't make sense. Although honestly LassPass should have lost all trust long before this and anyone still using it should switch.