Dashlane explains how attackers were able to download stored passwords

This means that the chances of the attacker deleting one of the passwords they found are very low if the password was strong, i.e. long, randomly generated, and has high entropy. However, not everyone uses such passwords. In the event that the password was included in the text changed by the password cracker, the chance of success would be high, although not impossible.

In fact, the events have similarities 2022 LastPass breachwhich also led the critics to find a place to save the storage. Later, the attackers managed to get confidential information from some of them. Success was the result of two things.

First, some fields, such as website URLs, remained unregistered in the database. This means that attackers can read them even without the password. Second, some of the hacked databases used old algorithms that did not sufficiently optimize the process of converting passwords to hashes. Dashlane has reported that there are no user fields in the database that have not been registered. In addition, when the algorithms are periodically updated to account for the progress of the disruptive technology, this process is done automatically, with no communication required. The algorithm where the process LastPass vaults at the time came with a lot of user conflicts.

Dashlane’s original announcement left out the details of the plot and made it great confusion about the risk users are continuing.

As a precaution, all passwords and content in the Dashlane repository should be changed immediately to reduce the chance, but not impossible, that attackers will succeed in cracking the password. Unaffected Dashlane users do not need to take any action.