‘Kim, what if my password manager gets hacked?’ It’s happened. Here’s who lost, who won and which one you’d be. | #hacker

🤯 WOW! In 2022, crooks stole a password manager’s customer vaults. The vaults with strong master passwords were never cracked. The weak ones? Federal investigators tied them to a $150 million crypto heist.

The Short Version: The lock decides everything, and you control the lock. A few simple steps put you on the winning side. See below.

📖 Read time: 2.5 minutes

“Kim, you keep telling us to use a password manager. But what happens if the password manager itself gets hacked? Isn’t that all my eggs in one basket?” — Frank in Arizona

Frank, I love this question, because we don’t have to guess at the answer. It already happened.

🥚 The basket that got dropped

In 2022, crooks broke into LastPass and stole customer vaults. The nightmare scenario, right? What they carried out the door were encrypted blobs. Digital bricks. That’s the part the scary headlines skip.

A password manager scrambles your vault on your device before it ever uploads, and the only key is your master password, which never leaves your head.

So the thieves went home and started guessing. Millions of tries per second, offline, no lockouts. The results tell you everything. Vaults locked with long, unique master passwords? Never opened.

You get to choose your lock today, on your schedule, instead of after a breach chooses for you.

🔐 Seal your basket tight 

The average person has 168 passwords, about 87 of which guard something that touches money. Nobody’s brain holds 168 of anything. 

That’s the whole case for a password manager in one number. Here’s how to land in the group that walks away bored:

1. Pick a manager built for the worst day. NordPass, the password manager I personally use and recommend, checks all the boxes. For starters, it encrypts everything on your device with XChaCha20, a modern cipher, plus zero-knowledge design. Nobody at NordPass can read your vault. Not an employee, not a hacker, not a subpoena. Independent auditors have checked their homework.
2. Make your master password a sentence. Pick four random words, like coffee-tractor-maple-September (or love-Kim-Komando-forever) that would take centuries to crack. It’s the last password you’ll ever memorize, so make it a good one.
3. Turn on multifactor authentication. Even a cracked master password hits a second wall. NordPass also works with your authenticator apps and physical security keys.
4. Let the Data Breach Scanner tattle. It checks whether your emails and cards are already floating in dumps like this summer’s 24 billion-record monster, then tells you which passwords to change first.
5. Switching takes two minutes. Don’t let the setup stop you. NordPass automatically imports all your passwords saved in Chrome, Safari or Edge in a single click.

Straight talk: No tool is a force field. If you type your master password into a phishing site, no vault can save you. But “my password manager got hacked” is not an unknown. It has a documented ending, and the prepared people won.

Putting all your eggs in one basket works as long as you make that basket titanium.

🎁 Exclusive reader offer:

Ready to secure your digital life? I arranged a special deal for my readers: Get NordPass for 55% off (only $1.34/month) plus 4 extra months free. It’s backed by a 30-day money-back guarantee, so there’s zero risk to try it.*

👉 Click here to claim your 55% off NordPass discount now.

Because the truly risky password manager is the sticky note on your monitor.

🎯 Send this to someone who keeps their passwords in a Notes app named “Passwords.”