Data leak in LastPass

[StuartR]

There is an article on the New Scientist web site that starts...

Another day, another data leak - but this one has the potential to put all of your passwords in danger. LastPass, a browser plugin that allows users to store their passwords on a remote server and access them from any computer or smartphone, has warned users that their master passwords may be at risk.

The service, which has over one million users, encrypts a user's passwords on their own computer with a master password. This encrypted file is then synchronised to the LastPass servers, where they can be accessed from any other browser by entering the master password.

LastPass says it discovered a "network traffic anomaly" on Tuesday morning, and after further investigation discovered that data had been transferred out of its servers. It says the amount of data leaked is big enough to have transferred users' email addresses along with an encrypted version of their master password.
...

If you use Last Pass then you may want to change your master password, and then change all your other passwords.

[DaveA]

Another REAL reason for NOT using these types of Tools.

I like my method, I have a Word file that I on a thumbdrive.

[StuartR]

I store mine in a a Truecypt container file on a USB drive. I would never let some online service store my passwords

[viking33]

I store mine in a a Truecypt container file on a USB drive. I would never let some online service store my passwords

Agree 100%. I have never felt good about sending my passwords out into cyberspace, despite "secure" assurances.
I do something a lot more primitive by putting my passwords in an encrypted database file, copying to a CD-RW and printing to a "secure" sheet, and storing in my office. ( I'm the only one with access to where that paper file is ) No one else uses my machine. Works for me!

[jscher2000]

It seems worse to have your password container in the cloud, but local machines get compromised and USB flash drives get lost. The goal behind effective cryptography is to make the location of the container irrelevant. The problem is, if your master password isn't "strong" then your container will be cracked sooner rather than later. For everyone else, changing passwords on a regular schedule probably is sufficient.