LastPass admitted that the source code was stolen by hackers, but did not disclose user data.

CTOnews.com August 26 news, LastPass publicly admitted a security incident, a developer's account was hacked, criminals got part of the source code and some proprietary technical information, but no user data was leaked, the server, products and services are running completely normal, users do not need any action.

LastPass said it discovered the vulnerability two weeks ago and confirmed that no user data had been compromised after an investigation because the master password was not stored on the LastPass server in the first place.

"We have determined that the unauthorized party has gained partial access to the LastPass development environment through an infected developer account, as well as some source code and some proprietary LastPass technical information. Our products and services are operating normally."

This happened in our development environment. Our findings show that no unauthorized person has access to encrypted vault data. Our model ensures that only the customer has the right to decrypt the vault data. Currently, we recommend our users or administrators to take any action.

CTOnews.com learned that LastPass is a cross-platform online password management tool for Freemium. It aims to solve the problem of frequently entering passwords by centralizing users' passwords in the cloud, and supports most browsers and platforms.

Passwords in LastPass are protected by a master password, encrypted locally, and can be synchronized to any browser. LastPass also supports automatic form filling, random password generation and password sharing.