LastPass Hikes Password Requirements to 12 Characters

LastPass announced strengthened security policies, including a minimum 12-character master password, previously increased PBKDF2 iterations, MFA re-enrollment for federated business customers using common authenticators, and checks against known breached passwords, rolling out first to Free/Premium/Families and then to Teams/Business by late January 2024; the company states these measures are proactive and not tied to a new incident, though they follow prior breaches.