Use the “passwords” feature to check if one of yours is compromised. If it shows up, never ever reuse those credentials. They’ll be baked into thousands of botnets etc. and be forevermore part of automated break-in attempts until one randomly succeeds.

    • ayyy@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      4
      ·
      4 days ago

      Got any examples? Because I have…some…examples of password reuse being a real-life problem.

        • Aetherion@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          4 days ago

          LastPass is the maximum shit. They got hacked like 3 times in a year and my company‘s password notes got leaked.

          We are now with Bitwarden and this was the biggest security hardening measure we have taken.

          • kazerniel@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            3 days ago

            Yeah, I left LastPass after like 15 years when I’ve come across some news headlines that it had got breaches more than once while I was using it O.o

            Been a happy user of Bitwarden for a couple years now. I love that little “copy custom field name” function, so I don’t have to go hunting around in the HTML code if a site is using weird field names.

          • sugar_in_your_tea@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            4 days ago

            Make sure whatever password manager you use doesn’t store the key on their servers. Bitwarden does this correctly (if you lose your PW, Bitwarden can’t recover it), and I’m sure some competitors do as well. LastPass apparently didn’t.

    • Echo Dot@feddit.uk
      link
      fedilink
      English
      arrow-up
      3
      ·
      4 days ago

      I seem to remember that the passwords were encrypted so, all they got was the passwords people use for their password manager which because people were using the password manager and therefore had random passwords it didn’t really matter hugely.