Phishers are getting sophisticated

[Zundfolge]

O2 is correct, its not as simple as someone just figuring out your password.

I tried to log into my LastPass account from work because I needed to get my email password. But it wouldn't let me in directly, it sent a verification email to my email address and wouldn't let me access my LastPass vault until I clicked the link in the verification email (and of course I didn't have the email account password with me so I couldn't get into LastPass).


So in order for a third party to get access to your LastPass vault, they'd have to have both your LastPass password AND know the email address and password of the email account you have associated with your LP account.