lastpass security challenge not my passwords

Lastpass security challenge not my passwords update#

The best course of action is to use this as an opportunity to rotate all passwords that have been flagged as potentially vulnerable. You can’t know for certain that your specific information was not leaked, so our security-conscious community will want to err on the side of caution. Because some data had been cached by search engines over that period of time, sensitive information may remain exposed. While the bug is now fixed, data had been leaking since September 2016. However, Cloudflare has said that the actual impact of the bug itself is relatively minor, so the risk to any one piece of data is fairly low. The scale of the bug was enormous, thanks to how many websites Cloudflare supports, including major sites like Medium, Namecheap, and.

See their blog post for more detailed information. Impacted data includes passwords, cookies, and tokens to authenticate users. Just launch the Security Challenge from the left panel in your LastPass vault, or launch the Security Challenge now to start securing your passwords:Ĭloudflare, a service that optimizes the security and performance of over 5.5 million websites, warned customers last week that a bug may have exposed sensitive user information.

Lastpass security challenge not my passwords update#

By highlighting impacted websites, LastPass will help you prioritize and update your passwords. Worried about “Cloudbleed”? The LastPass Security Challenge now identifies top websites ( affected sites that are in the top 10,000 Alexa ranking) that may be impacted by Cloudflare’s recent security bug.