I reset my MFA for LastPass in Google Authenticator

[tlmcca]

After reading more of the reporting on the GoTo breach and seeing that "a portion of Multi-Factor Authentication (MFA) settings" were disclosed I decided to reset my Authenticator settings. My reasoning was that there was no statement from GoTo one way or the other whether LastPass MFA was exposed so resetting was the safest thing to do.

If you are interested this LP support topic covers the process.

I also deleted and recreated OTP codes.

Terry

 

[PHolder]

To be clear, as far as the safety of your LP vault is concerned, this is like repairing your fence after all your livestock have escaped. The attacker already has your vault, updating protections that would keep them from getting your vault is not going to make any difference.

 

[tlmcca]

To be clear, as far as the safety of your LP vault is concerned, this is like repairing your fence after all your livestock have escaped. The attacker already has your vault, updating protections that would keep them from getting your vault is not going to make any difference.

I agree, but I had already changed all passwords which obviates any value of the thieves decrypting the backup of my vault. Just doing what I can going forward.