New ask Hacker News story: LastPass Login Attempted Activity Blocked – More Information

LastPass Login Attempted Activity Blocked – More Information
5 by kevinslashslash | 0 comments on Hacker News.
Just got this email from LastPass. I'm not satisfied with their explanation though. As part of our ongoing commitment to security, we regularly monitor our services for actual, suspected, or attempted malicious or unusual activity. When our systems detect unusual login activity from different devices or locations we send an automated email for you to confirm the activity. Recently, you may have received one of these emails from us. If the login attempt was you, and if you haven’t done so already, please make sure to verify your device and/or location. You’ll continue to receive emails like this when, for example, you log in from new devices or locations in our effort to keep your information secure. We also encourage you to reference our blog for best practices for keeping your account secure. If the login attempt was not you, allow us to explain what happened. We recently received reports of an uptick of users receiving blocked access emails. Our investigation found that some of these security alerts, which were sent to a limited subset of LastPass users, were likely triggered in error. As a result, we have adjusted our security alert systems and this issue has since been resolved. At this time, there is no indication that your LastPass account or your credentials were breached or compromised. However, out of an abundance of caution, we recommend, if the login attempt was not you, that you reset your Master Password. Lastly, it is important to remember that LastPass utilizes a zero-knowledge security model that is designed to ensure that customer data remains protected. When a LastPass user creates their Master Password, it’s used to generate a unique encryption key. The Master Password and the encryption key stay local on the user’s device – they are never sent to or shared with LastPass. We apologize for any concern or inconvenience that these alerts may have caused. LastPass was built with security in mind and includes various features, including notifications for failed logins, trusted device verification, account recovery, and more. Read more about them on our blog. Thank you for being a valued LastPass customer.