Connect with us

Technologies

What LastPass Subscribers Need to Do After the Latest Breach

It’s time for LastPass subscribers to find a different password manager after the latest data breach.

LastPass, a popular password manager, has suffered a major data breach, compromising customers’ personal information and putting their online passwords at risk.

In late December, LastPass CEO Karim Toubba acknowledged in a blog post that a security incident the company disclosed in August had eventually led to an unauthorized party stealing customer account information and sensitive vault data. The breach is the latest in a lengthy and troubling string of security incidents involving LastPass that date back to 2011.

It’s also the most alarming.

An unauthorized party was able to gain access to unencrypted subscriber account information like LastPass usernames, company names, billing addresses, email addresses, phone numbers and IP addresses, according to Toubba. That same unauthorized party was also able to steal a copy of customer vault data, which includes unencrypted data like website URLs and encrypted data like the usernames and passwords for all the sites customers have stored in their vaults.

If you’re a LastPass subscriber, the severity of this breach should have you looking for a different password manager, because your passwords and personal data are at serious risk of being exposed.

What should LastPass subscribers do?

The company didn’t specify how many users were affected by the breach, and LastPass didn’t respond to CNET’s request for additional comment on the breach. But if you’re a LastPass subscriber, you need to operate under the assumption that your user and vault data are in the hands of an unauthorized party with ill intentions. Though the most sensitive data is encrypted, the problem is that the threat actor can run «brute force» attacks on those stolen local files. LastPass estimates it would take «millions of years» to guess your master password — if you’ve followed its best practices.

If you haven’t — or if you just want total peace of mind — you’ll need to spend some serious time and effort changing your individual passwords. And while you’re doing that, you’ll probably want to transition away from LastPass, too.

With that in mind, here’s what you need to do right now if you’re a LastPass subscriber:

1. Find a new password manager. Given LastPass’ history with security incidents and considering the severity of this latest breach, now’s a better time than ever to seek an alternative.

2. Change your most important site-level passwords immediately. This includes passwords for anything like online banking, financial records, internal company logins and medical information. Make sure these new passwords are strong and unique.

3. Change every single one of your other online passwords. It’s a good idea to change your passwords in order of importance here too. Start with changing the passwords to accounts like email and social media profiles, then you can start moving backward to other accounts that may not be as critical.

4. Enable two-factor authentication wherever possible. Once you’ve changed your passwords, make sure to enable 2FA on any online account that offers it. This will give you an added layer of protection by alerting you and requiring you to authorize each login attempt. That means even if someone ends up obtaining your new password, they shouldn’t be able to gain access to a given site without your secondary authenticating device (typically your phone).

5. Change your master password. Though this doesn’t change the threat level to the stolen vaults, it’s still prudent to help mitigate the threats of any potential future attack — that is, if you decide you want to stay with LastPass.

LastPass alternatives to consider

  • Bitwarden: CNET’s top password manager is a highly secure and open-source LastPass alternative. Bitwarden’s free tier allows you to use the password manager across an unlimited number of devices across device types. Read our Bitwarden review.
  • 1Password: Another excellent password manager that works seamlessly across platforms. 1Password doesn’t offer a free tier, but you can try it for free for 14 days.
  • iCloud Keychain: Apple’s built-in password manager for iOS, iPadOS and MacOS devices is an excellent LastPass alternative available to Apple users at no additional cost. iCloud Keychain is secure and easy to set up and use across all of your Apple devices. It even offers a Windows client, too, with support for Chrome and Edge browsers.

How did it come to this?

In August 2022, LastPass published a blog post written by Toubba saying that the company «determined that an unauthorized party gained access to portions of the LastPass development environment through a single compromised developer account and took portions of source code and some proprietary LastPass technical information.»

At the time, Toubba said that the threat was contained after LastPass «engaged a leading cybersecurity and forensics firm» and implemented «enhanced security measures.» But that blog post would be updated several times over the following months as the scope of the breach gradually widened.

On Sept. 15, Toubba updated the blog post to notify customers that the company’s investigation into the incident had concluded.

«Our investigation revealed that the threat actor’s activity was limited to a four-day period in August 2022. During this timeframe, the LastPass security team detected the threat actor’s activity and then contained the incident,» Toubba said. «There is no evidence of any threat actor activity beyond the established timeline. We can also confirm that there is no evidence that this incident involved any access to customer data or encrypted password vaults.»

Toubba assured customers at the time that their passwords and personal data were safe in LastPass’s care.

However, it turned out that the unauthorized party was indeed ultimately able to access customer data. On Nov. 30, Toubba updated the blog post once again to alert customers that the company «determined that an unauthorized party, using information obtained in the August 2022 incident, was able to gain access to certain elements of our customers’ information.»

Then, on Dec. 22, Toubba issued a lengthy update to the blog post outlining the unnerving details regarding precisely what customer data the hackers were able to access in the breach. It was then that the full severity of the situation finally came to light and the public found out that LastPass customers’ personal data was in the hands of a threat actor and all of their passwords were at serious risk of being exposed.

Still, Toubba assured customers who follow LastPass’s best practices for passwords and have the latest default settings enabled that no further action on their part is recommended at this time since their «sensitive vault data, such as usernames and passwords, secure notes, attachments, and form-fill fields, remain safely encrypted based on LastPass’ Zero Knowledge architecture.»

However, Toubba warned that those who don’t have LastPass’s default settings enabled and don’t follow the password manager’s best practices are at greater risk of having their master passwords cracked. Toubba suggested that those users should consider changing the passwords of the websites they have stored.

What does all of this mean for LastPass subscribers?

The initial breach ended up allowing the unauthorized party to access sensitive user account data as well as vault data, which means that LastPass subscribers should be extremely concerned for the integrity of the data they have stored in their vaults and should be questioning LastPass’s capacity to keep their data safe.

If you’re a LastPass subscriber, an unauthorized party may have access to personal information like your LastPass username, email address, phone number, name and billing address. IP addresses used when accessing LastPass were also exposed in the breach, which means that the unauthorized party could also see the locations from which you used your account. And because LastPass doesn’t encrypt users’ stored website URLs, the unauthorized party can see all of the websites for which you have login information saved with the password manager (even if the passwords themselves are encrypted).

Information like this gives a potential attacker plenty of ammunition for launching a phishing attack and socially engineering their way to your account passwords. And if you have any password reset links stored that may still be active, an attacker can easily go ahead and create a new password for themselves.

LastPass says that encrypted vault data like usernames and passwords, secure notes and form-filled data that was stolen remains secured. However, if an attacker were to crack your master password at the time of the breach, they would be able to access all of that information, including all the usernames and passwords to your online accounts. If your master password wasn’t strong enough at the time of the breach, your passwords are especially at risk of being exposed.

Changing your master password now will, unfortunately, not help solve the issue because the attackers already have a copy of your vault that was encrypted using the master password you had in place at the time of the breach. This means the attackers essentially have an unlimited amount of time to crack that master password. That’s why the safest course of action is a site-by-site password reset for all of your LastPass-stored accounts. Once changed at the site level, that would mean the attackers would be getting your old, outdated passwords if they managed to crack the stolen encrypted vaults.

For more on staying secure online, here are data privacy tips digital security experts wish you knew and browser settings to change to better guard your information.

Related Topics:

Technologies

In a World Without BlackBerry, Physical Keyboards on Phones Are Making a Comeback

Commentary: You might not even need a new phone to get clicky buttons.

If you have fond memories of clicking away on the BlackBerry, the Palm Treo, the T-Mobile Sidekick or similar handhelds from back in the day, I have good news for you: Phones with keyboards are making a comeback. Sort of. 

There’s a growing number of companies looking to bring back clicky, tactile buttons, whether for that nostalgic appeal or to reinvent phone keyboards as an addition to your iPhone or Android device. Some of these have even just announced their plans at CES 2026 or will be bringing these button-filled phones to this year’s Mobile World Congress. 

From keyboard cases to modern-day BlackBerry clones, here’s what we know about the potential QWERTY renaissance. 

Why are keyboards on phones making a comeback?

It’s difficult to assess the exact turning point for when physical phone keyboards made a comeback, but we have a couple of guesses. Perhaps the biggest reason this is happening is that people rely on their phones as their primary computer. As such, they’re probably typing long emails or editing documentation with just their phone’s touch keyboard. 

While that’s perfectly fine for most people, some yearn for the comfort and tactile feel of physical keys. And perhaps getting tired of bad autocorrect errors when typing too quickly.

Another potential case for phones with keyboards is simply the desire for variety. Some people might feel a general fatigue over the familiar look and feel of modern smartphones. Having a handset that functions differently — see the popularity of recent flip and folding phones — is a welcome change. 

Plus, phones with keyboards appeal not just to the older generation who miss them, but also to the younger generation who are increasingly into retro tech. 

Can I get a BlackBerry in 2026?

Not really. If you want to get a new BlackBerry right out of the factory, you’re out of luck, as the company discontinued hardware production in 2020 and further discontinued its software services in 2022. 

You could try to get a BlackBerry on the secondary market (like the TCL-made KeyOne or Key2), but the Android version is outdated and won’t be as functional as other smartphones. Wirecutter’s Brenda Stolyar recently attempted to revive a Blackberry Classic Q20 from 2015 and discovered that, while it can still run modern apps, it takes a lot of patience to sideload them onto the device.

Zinwa is one company that’s buying up old stock of BlackBerry hardware, replacing the internals with new components, installing Android and then reselling them. Its first «product» is the Zinwa Q25, which is essentially a retrofitted BlackBerry Classic. You can buy the finished product for $400 or get a conversion kit for $300. 

What keyboard phones and accessories are currently available?

There are several options for keyboard phones on the market. 

Clicks keyboard case

The easiest way to get a phone with a keyboard is to turn your existing phone into one. That’s the promise of the Clicks keyboard case, which adds a physical keyboard to most modern smartphones. It made a big splash at CES 2024 and has continued to expand its lineup (we’ll get to that shortly). Simply pop your phone inside the case, and voila, you’ll have a phone with a keyboard.

In our hands-on, we liked the extra screen real estate, how quickly the keyboard interface worked, the preprogrammed keyboard shortcuts and the tactile keys. That said, the keyboard does feel a bit crowded, and it’s unclear if it’s that much more comfortable than the default touch keyboard. Currently, the Clicks keyboard case works with the iPhone 14 and newer, the Razr 2024 and newer and the Pixel 9 and 9 Pro. Its price starts at $139. 

There are also plans to release a Clicks Power Keyboard, that attaches to your phone via MagSafe or Qi2 magnetic connection. The Power Keyboard has a slider that accommodates phones of different sizes, plus it can be paired with a tablet, a smart TV or anything that uses Bluetooth. This makes the Power Keyboard much more flexible than the Clicks case, since it doesn’t need to be made for a particular device. 

The preorder price is $79, though that could go up in the future. 

Clicks Communicator

If you feel ready to get a dedicated keyboard-equipped phone, Clicks also recently announced the Clicks Communicator, an Android smartphone centered around the keyboard experience. It is designed by a former BlackBerry designer to show what a new BlackBerry phone would be like for 2026. It has a slimmed-down interface that prioritizes messaging apps, a text-based home screen and of course, a tactile and clicky keyboard.

As it’s not as full-featured as other modern smartphones, Clicks is positioning the Communicator as a secondary productivity-focused device, which might be a good thing if you’re trying to limit your social media screen time. 

It’ll be available later this year for $499, but you can preorder it now for $399. 

Unihertz Titan

Unihertz is a Chinese company that’s been making keyboard phones for a few years now. They’re all part of the Titan series and run Android. The current lineup includes the Titan, Titan Pocket, Titan Slim and Titan 2. Plus, an upcoming Titan 2 Elite has been teased for Mobile World Congress. It looks like a curvier addition to the lineup, compared with the other passport-shaped models. 

These phones look a lot like BlackBerrys of yore, and the Titan 2 in particular seems to bear a passing resemblance to the BlackBerry Passport. 

Prices start at around $300.

Ikko Mind One

The Ikko Mind One is a unique «card-sized» Android phone that comes with an innovative Sony 50-megapixel flip-up camera and, indeed, an optional keyboard case. It also ships with an «Ikko AI OS,» though it’s unclear how that works just yet. It looks utterly adorable, but we haven’t heard enough about it yet. 

The Pro version sells for $429. 

Minimal Phone

If you combined a Kindle with a BlackBerry, you might have the Minimal Phone. As the name suggests, the Minimal Phone is designed to be a super-simple distraction-free alternative to the modern smartphone. It has a generic e-paper display, a straightforward user interface, a QWERTY keyboard and the Android operating system. 

The price starts at $449. You can check out PCMag’s review of the Minimal Phone here.

Which physical phone keyboard should I get?

For now, the easiest way to get a physical keyboard on your phone is likely one of the Clicks accessories, since the keyboard case and power keyboard won’t require a full phone purchase. 

For most of these other devices, you’re entering a niche phone category, so support could be all over the place. You’ll want to check how many years of software and security updates these other phones are expected to receive. That way, you can have an idea about how many years of use you can safely get with these phones.

You’ll also want to consider how you want to use the device. If you’re looking for something that’s a step back from a more powerful yet constantly pinging device, the Clicks Communicator or the Minimal Phone might make a good secondary phone. The Unihertz Titan line and the Ikko Mind One may be a closer mimic of that BlackBerry experience. 

Continue Reading

Technologies

I Asked Audiologists if My Earbuds Are Damaging My Ears

I spoke with ear health experts to learn more about the risks of wearing earbuds and which headphone style is best to prevent hearing loss.

I experienced hearing loss for the first time in early 2025 due to a case of eustachian tube dysfunction, which is when the tube connecting the middle ear to the back of the nose no longer functions properly. Even after I recovered, I was scared it would happen again. So as a wellness writer with 10-plus years of experience who understands the importance of being proactive with my health, I decided to do everything in my power to prevent hearing loss from affecting me again.

While researching ear health tips, I discovered that a common piece of technology, my earbuds, could have been contributing to my hearing issues. To find out if that’s actually the case, I spoke to ear health experts. This is what they had to say, and what they taught me about preserving my ear health.

Earbuds, ear health and hearing risks

Earbuds can pose a few risks, according to Dr. Ruth Reisman, a licensed audiologist and New York hearing aid dispenser. They can trap heat and moisture in the ear, increasing the risk of ear infections. With repeated use, earbuds can also push earwax deeper into the ear, leading to buildup or impaction. Plus, if your earbuds don’t fit correctly or you wear them for long periods, they can cause irritation or soreness in your ear canal. 

“Earbuds sit directly in the ear canal, which can increase several risks. The biggest concern is noise-induced hearing loss if volume is too high or listening time is too long,” said Reisman. “I have witnessed all of these problems in the course of my 15 years as an audiologist.”

When you listen to content at high volume, particularly for an extended period, Dan Troast, an audiologist at HearUSA, explains that it can permanently damage the delicate hair cells in your inner ear. Earbud use combined with high volume can cause:

  • Noise-induced hearing loss
  • Tinnitus (ringing, buzzing or hissing in the ears)
  • Sound sensitivity over time

Misusing earbuds is also common. If they don’t have noise cancellation, you might repeatedly turn up the volume to avoid hearing background noise, which can put you in an unsafe listening range fast. However, even listening at a moderate volume can become a problem if you do so for hours each day. 

“Early signs of overexposure include temporary muffled hearing or ringing after listening sessions — both are warning signals from the auditory system,” Troast said. Even if you periodically experience temporary ringing in your ears, it can ultimately increase your risk of developing chronic tinnitus. 

Earbuds and radiation

In my search for ear health tips, I came across several articles discussing whether wireless Bluetooth earbuds can cause harm through radiation. I asked Reisman if this is true. 

“Current scientific evidence doesn’t show that the energy from Bluetooth earbuds causes harm,” she said. “These devices emit far less radiation than cell phones and remain well below established safety limits. From an audiology standpoint, sound exposure is a far greater risk than radiation.”

The 60/60 rule you’ll want to follow if you wear earbuds 

Both Reisman and Troast recommend the “60/60 rule” to people who wear earbuds. The 60/60 rule means you listen at no more than 60% of the maximum volume for no more than 60 minutes at a time. 

“Daily use is fine if the volume stays safe and ears are given time to rest,” Reisman advises. “I usually tell patients to take a 15- to 20-minute break for every hour of use.”

If you haven’t already, Troast recommends checking whether your devices have built-in hearing health settings that automatically monitor volume exposure. For instance, on your iPhone, Apple Watch or iPad, you can set up headphone notifications to alert you to lower the volume when you’ve reached the seven-day audio exposure limit (such as 80 decibels for 40 hours over seven days). Or, you can activate the Reduce Loud Audio feature to have your headphone volume automatically lowered once it exceeds your set decibel level.

Safer types of headphones for your ears

Over-the-ear headphones are generally safer, according to Reisman, because they sit outside the ear canal and don’t concentrate sound as directly on the eardrum. Since they aren’t in the ear canal like earbuds, they’re also less likely to cause irritation or earwax buildup. 

“Over-the-ear headphones can be safer — if they allow for lower listening volumes,” said Troast. “Even better are noise-canceling headphones, which reduce background noise, so listeners don’t feel the need to crank up the volume.” Just make sure you’re still aware of your surroundings, especially if you’re outdoors near traffic. 

Open earbuds could also be a safer option. They use bone-conduction technology, which transmits sound through the earbones and the skull rather than directly to the eardrum. «Several headphone companies claim open earbuds are better for your hearing health and are more hygienic,» said David Carnoy, CNET’s resident headphone expert. 

Since open earbuds don’t sit inside or cover the ear:

  • Warmth and moisture, like sweat, won’t build up, which can cause ear infections. 
  • Debris, such as dust, won’t transfer from the earbuds into the ear. 
  • They won’t push earwax deeper in your ear, which can lead to impaction. 
  • Don’t rub or press on the ear canal, reducing discomfort or irritation.

However, if you listen to content at high volumes, no headphone style is completely safe. What matters most for your ear and hearing health is total sound exposure over time, so make sure you’re monitoring your volume level and giving your ears breaks. 

Expert earbud tips

If earbuds are your preferred headphone type for listening to your favorite music, shows and podcasts, Troast offers the following tips from an audiology perspective:

  • Use built-in volume limit settings on smartphones.
  • Choose noise-canceling earbuds or headphones to avoid increasing volume in loud environments.
  • Take regular listening breaks.
  • Avoid sleeping in earbuds.
  • Get a baseline hearing test, especially if you use earbuds daily.

If you’re already experiencing tinnitus, it’s especially important that you manage your volume level to prevent it from worsening. 

Carnoy adds that there have also been instances of people being allergic to the materials used for earbud tips. If you have a known allergy, make sure your earbuds don’t use that material, or replace the tips. If you do have an allergic reaction, stop using the earbud tips until you can find a substitute. 

Lastly, Reisman advises keeping your earbuds clean, avoiding sharing them and ensuring they fit properly. Most earbuds come with tips in different sizes, so you can find the right fit for your ear size.

When to see an audiologist or doctor

If you experience ringing in the ears, muffled hearing, ear pain or frequent infections, Reisman recommends you consider an evaluation with an audiologist. 

You’ll also want to pay attention to early warning signs of inner ear damage from noise exposure, such as ringing in the ears, difficulty hearing or needing to turn up the volume over time.

If you’re already experiencing hearing loss, Troast said that addressing it with hearing aids can provide relief. Tinnitus, on the other hand, can be treated with evidence-based approaches such as sound therapy or specific counseling strategies. 

“Hearing damage is gradual and cumulative,” Reisman said, “but it’s also largely preventable with smart and healthy listening habits.” And that includes using your headphones — or, in my case, earbuds — responsibly. 

Continue Reading

Technologies

Today’s NYT Mini Crossword Answers for Saturday, Feb. 21

Here are the answers for The New York Times Mini Crossword for Feb. 21.

Looking for the most recent Mini Crossword answer? Click here for today’s Mini Crossword hints, as well as our daily answers and hints for The New York Times Wordle, Strands, Connections and Connections: Sports Edition puzzles.

Need some help with today’s Mini Crossword? It’s the long Saturday version, and some of the clues are stumpers. I was really thrown by 10-Across. Read on for all the answers. And if you could use some hints and guidance for daily solving, check out our Mini Crossword tips.

If you’re looking for today’s Wordle, Connections, Connections: Sports Edition and Strands answers, you can visit CNET’s NYT puzzle hints page.

Read more: Tips and Tricks for Solving The New York Times Mini Crossword

Let’s get to those Mini Crossword clues and answers.

Mini across clues and answers

1A clue: «Jersey Shore» channel
Answer: MTV

4A clue: «___ Knows» (rhyming ad slogan)
Answer: LOWES

6A clue: Second-best-selling female musician of all time, behind Taylor Swift
Answer: MADONNA

8A clue: Whiskey grain
Answer: RYE

9A clue: Dreaded workday: Abbr.
Answer: MON

10A clue: Backfiring blunder, in modern lingo
Answer: SELFOWN

12A clue: Lengthy sheet for a complicated board game, perhaps
Answer: RULES

13A clue: Subtle «Yes»
Answer: NOD

Mini down clues and answers

1D clue: In which high schoolers might role-play as ambassadors
Answer: MODELUN

2D clue: This clue number
Answer: TWO

3D clue: Paid via app, perhaps
Answer: VENMOED

4D clue: Coat of paint
Answer: LAYER

5D clue: Falls in winter, say
Answer: SNOWS

6D clue: Married title
Answer: MRS

7D clue: ___ Arbor, Mich.
Answer: ANN

11D clue: Woman in Progressive ads
Answer:  FLO

Continue Reading

Trending

Copyright © Verum World Media