Password service warns users to change their, yep, passwords
Source: AP
By BRANDON BAILEY
SAN FRANCISCO (AP) — A web service that promises to help people keep their passwords secure has reported hackers may have obtained some user information — although not actual passwords — from its network.
LastPass, which stores multiple passwords in encrypted form, warned Monday that it had detected "suspicious activity" on its own computer system. That led to the discovery that some users' email addresses, password reminders and encryption elements were compromised. The company said its investigation found no evidence that individual passwords or user accounts were breached.
The company is advising users to change their LastPass master passwords, which are used to retrieve encrypted individual passwords for the users' other online services or accounts. But it said they don't need to change individual passwords for all their accounts.
Read more: http://bigstory.ap.org/article/ed500c65c8a041b780754b849cd22fd4/password-service-warns-users-change-their-yep-passwords
= new reply since forum marked as read
They need to come out with one specific to passwords.
Under "Name" I put in the site, "Address" is user name, "Phone" is password.
If you want to use a password manager, KeePass is as good as any (and better than some)
but the best approach is to combine stored data (be it in a diary, address book, spreadsheet
or shopping list) with your own mind - write down a starting letter and maybe the length of the
pw but use your mind to link it up with the account rather than writing that down too.
That way, if you forget, you have your own little "password hint" and if your storage is in
any way compromised (or stolen) then at least they haven't got the bits that are in your head!
