#Lastpass Hack mitigation:
If you're a Lastpass user, even if you're planning on leaving, it'll take some time to do so.
1. Enable MFA, preferably a good one like hardware keys or authenticator apps.
2. Lock down LastPass access to only the countries you expect to be in in the near term. You can do this through the web advanced settings tab.
3. Prohibit access from tor networks unless you're typically using them.
4. Increase your 'password iterations' value to something OVER 600,000.
#cososec
@0x56 I agree with #4, but with the caveat that it will not protect any vaults already stolen which had lower iteration counts (at that time), so still requires your additional step #5 to be effective.
@codeWhisperer - good point that I missed writing out. Thank you.