LastPass Forced 2FA Reset

https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass%2Fwhy_do_i_have_to_reset_my_authenticator_app.html&_LANG=enus

by weird_fox • 3 years ago

47 6 3 years ago

support.lastpass.com

weird_fox• 3 years ago

Hey,

So i just got hit by this. Basically LastPass won't let you login anymore, unless you relink your 2FA with a new seed. Is there something going on here? I can't imagine a legit use case why they would force this besides a breach.

gabeio• 3 years ago

Jun 16, 2023

It's also interesting that the article seems to have been updated/published (I can't seem to tell which) 2 days ago...

Havoc• 3 years ago

They were forcing more encryption rounds via a reset a while back. Unclear whether this is the same thing still or a new issue

EAtmULFO• 3 years ago

I assume they are forcefully resetting MFA tokens for folks who did not read the full details of the hack and took appropriate action? One of the later iterations of the advisory regarding the hack stated token data was taken, requiring you to reset MFA.

justicz• 3 years ago

I switched to Bitwarden a few months ago (after using LastPass for years) and haven't looked back. Would recommend.

While I'm sure Bitwarden has its own set of issues I'm unaware of... at least you can self-host it, it's open-source, and it sure doesn't seem to have constant security incidents/oddities like LastPass!

ThePowerOfFuet• 3 years ago

I wonder how much of that partially-obscured QR code is decodable by hand...

LastPass Forced 2FA Reset

Related Stories