LastPass Forced 2FA Reset(support.lastpass.com)
support.lastpass.com
LastPass Forced 2FA Reset
https://support.lastpass.com/s/document-item?language=en_US&bundleId=lastpass&topicId=LastPass%2Fwhy_do_i_have_to_reset_my_authenticator_app.html&_LANG=enus
6 comments
I wonder how much of that partially-obscured QR code is decodable by hand...
Hey,
So i just got hit by this. Basically LastPass won't let you login anymore, unless you relink your 2FA with a new seed. Is there something going on here? I can't imagine a legit use case why they would force this besides a breach.
So i just got hit by this. Basically LastPass won't let you login anymore, unless you relink your 2FA with a new seed. Is there something going on here? I can't imagine a legit use case why they would force this besides a breach.
I assume they are forcefully resetting MFA tokens for folks who did not read the full details of the hack and took appropriate action? One of the later iterations of the advisory regarding the hack stated token data was taken, requiring you to reset MFA.
I switched to Bitwarden a few months ago (after using LastPass for years) and haven't looked back. Would recommend.
While I'm sure Bitwarden has its own set of issues I'm unaware of... at least you can self-host it, it's open-source, and it sure doesn't seem to have constant security incidents/oddities like LastPass!
While I'm sure Bitwarden has its own set of issues I'm unaware of... at least you can self-host it, it's open-source, and it sure doesn't seem to have constant security incidents/oddities like LastPass!