Quote from: witcher_sense on February 08, 2023, 07:26:06 AM

Quote from: libert19 on February 08, 2023, 03:31:21 AM

...encrypt it and put it somewhere safe. Just so, if it goes offline your data remains safe.

In the case of LastPass's recent data breach, it is not enough to just migrate your vault to an offline place or some other password manager. All your passwords and other sensitive information became accessible, albeit in encrypted form, to whoever conducted that hacker attack, which means in the long run, if the master passphrase you have set up was too weak, you can safely assume that all your passwords have already been compromised. So, it is usually pointless to re-use an old vault since all the passwords it contains have potentially been compromised. I suggest the following solution: login to websites on which you have accounts using LastPass, change your passwords one by one, inserting them in a more reliable password with a randomly generated master password. It will take some time, but it is more secure than simply using your old passwords in a new manager.

I meant it for original user - so there remains a way to access your data in case company itself goes off. What security if you can't access your own data in first place?