According to LastPass, an unauthorized party gained access to a third-party cloud-based storage service that LastPass uses to store encrypted archived customer vault data. In layman terms, it means the “threat actor” now has a backup of your LastPass vault in which you store website login info, credit card numbers, and other such important info.
LastPass is also recommending changing the passwords that you have stored in its app. That could be a daunting task for those with too many stored login credentials, but alas, it seems it’s one of the best ways to make sure this breach isn’t able to affect you and all the private info you may have stored in LastPass.
How to export your LastPass passwords
To switch from LastPass to another password manager, you’ll need to export all your data. Luckily, LastPass makes this process a breeze, but notably you have to do it on a computer, it can’t easily be done from a mobile device or iPad/Android tablet.
First, log in to the LastPass website. On the sidebar, you’ll see Advanced Options. Under the “Manage Your Vault” section, you’ll then see an Export button. After you click that, you’ll be required to enter your master password to verify your identity, then LastPass will automatically download a CSV file with all of your exported passwords. Generally speaking, most other password managers that offer an import option will be able to use that file to pull in your passwords and data.
Alternatively, you can perform this same function through the LastPass browser extension; this process works whether you’re on Chrome, Firefox, or any other browsers. To do it, tap on the extension, hit Account Options and Advanced. From there, you can pick a CSV file, an encrypted file, or “Form Fills.”
But as mentioned earlier, following the major breach that occured, it would be good practice to change many if not all of your passwords.
