Password managers are in the business of trust. This foul company is the opposite of trustworthy. They disclosed the details of a major data breach that happened months ago -- which they've previously downplayed as largely harmless, before more details that *just* came out -- literally on the Friday before Christmas, and not even through the browser extension (where regular users might actually see it), but only on its website (so you have to run across the report by accident or on social media). I am spending my Friday evening before the holidays resetting all my passwords, and I somehow have to consider that I am luckier than those who didn't notice at all and might soon experience identity theft.

I understand data breaches happen, even for password managers -- where you'd think security is most paramount -- but the handling of such disasters is how you distinguish trusted companies you could work with from abusive ones. There is cause for class action litigation with LastPass' handling of this whole affair.

I have never written a review for extensions, and rarely for anything else, but this is unbelievably unacceptable.