I'll go into some technical details later, but I want to bring up something I haven't heard discussed properly. However, for most people it's not blindingly obvious beyond the breach itself, why, from a technical perspective they should be avoiding LastPass completely.

I’ll discuss alternatives, including the integrated authenticator in iOS 15 and above, after this setup guide.Sure, it's become obvious in the last few weeks why people should be seriously reconsidering their choice of password manager. In this tutorial, we’re going to use Google Authenticator, as it’s available for both Android and iOS and provides a consistent interface. We’re going to use your mobile phone as an authentication device, using an authenticator app. They’re vulnerable to SMS interception attacks, specific kinds of phishing, and you can lose access to your number if it’s disconnected and reallocated due to non-payment of bills or other disputes with your mobile provider. If you have any services that use SMS messages to authenticate you, these should also be switched to app-based 2FA, as mobile phone numbers should never be used as a proxy for identity. It’s a good idea to add 2FA to widely targeted online services such as Amazon anyway. You should also add two-factor authentication to services such as PayPal, Stripe and Wise, and any online retailers that don’t trigger your bank’s card confirmation system when you shop with them. Your bank almost certainly already applies 2FA, using its own mobile as a token, which secures most financial transactions using your card. That includes social media like Facebook, TikTok and Twitter, email services like Gmail and ProtonMail, online storage and office suites, and financial services. This guide will show you how to use an authenticator app on your phone to add security to your accounts. If you have an online service account that involves your personal or financial information, you need to apply two-factor authentication to it.

Bitwarden backup codes