![A cartoon illustration shows a shadowy figure carrying off a red directory folder, which has a surprised-looking face on its side.](https://cdn.vox-cdn.com/thumbor/9wgREkBpg_ZGJ1fgccU1D-DtRiM=/0x0:2040x1360/1310x873/cdn.vox-cdn.com/uploads/chorus_image/image/73020080/VRG_Illo_STK001_B_Sala_Hacker.0.jpg)
Following a high-profile security breakdown in 2022, LastPass is finally imposing a 12-character minimum for customers’ master passwords.
BleepingComputer spotted a release from LastPass confirming the change that acknowledges 12 characters was already the default setting, but preexisting users previously had the option to set a shorter password. LastPass removed this option last April, requiring new customers and anyone resetting their master password to hit the 12-character requirement. But if your account had a shorter, less secure password, you’ll be forced to change it soon.
LastPass’ security woes are well documented — breaches in 2022 allowed hackers to steal customer vault data. If you were affected, this meant the only thing…