Enable Multi-factor Authentication (MFA) wherever possible on all your digital accounts.

Remain extra vigilant for any dodgy emails you may receive, especially on the email account registered with LastPass and email accounts within your LastPass vault.In your LastPass ‘Security Dashboard’, if you have a ‘master password alert’, it is recommended that you update important passwords in your LastPass vault. Update all passwords in your password vault.Follow the steps in this helpful LastPass article regarding how you can change your password iterations. Check your ‘Advanced Account settings’ and ensure you use the right settings.Ensure the master password is a minimum of 16 characters, and do not reuse the master password anywhere – it should be unique and only used for LastPass access. If you are not using Deakin SSO to log into LastPass, we recommend you take the following actions. From what we understand, the attacker exfiltrated LastPass vaults from a third-party backup provider that LastPass uses.Īlthough most of the information breached was encrypted, we are aware that the attackers gained the ability to access the information stored in LastPass from some personal LastPass accounts that weren’t using Deakin Single Sign-On (SSO), have not had the correct security settings or had weak passwords.

What happened?Īs you may already know, LastPass was targeted in a cyber security attack that resulted in a significant breach impacting all users.

If you are a LastPass user, please take a moment to immediately review and update your LastPass details following a recent security incident. Faculty of Science, Engineering and Built Environmentġ8 January 2023 Do you use LastPass? Please review your account immediately following a recent security breach.

Lastpass backup vault