LastPass now requires 12-character master passwords for better security

LastPass is now enforcing a minimum 12-character master password and checking new/updated master passwords against breached-credentials databases after two 2022 security incidents in which attackers compromised developer and DevOps systems and stole customer vault data; threat actors have been cracking stolen master passwords and using recovered passphrases/private keys to drain cryptocurrency wallets, prompting forced MFA re-enrollment and user security warnings.