enter image description here

I've been using LastPass for several years, both professionally and personally, and encouraging others to use it too. Even in the face of recent news about security incidents at LastPass, I've been watching and waiting to evaluate their response and see if they would actually emerge stronger for it. Now that it's been a few months, most IT security experts have reached a consensus that LastPass is not responding adequately, and they recommend moving on.

There is no need for panic, but if you have any high-value login credentials stored in a LastPass Vault, it would be prudent to begin changing those passwords now, and enable two-factor authentication on any accounts that do not already have it. Note that changing your LastPass master password alone does not prevent attackers from potentially cracking the encryption of the backup data that they obtained, so changing your actual account passwords is the safest move.

Below is a podcast that does a good job of reviewing the facts objectively, cutting through some of the hyperbole that has swept the media.

Security Now - Leaving LastPass