> "Next month, LastPass will also begin immediate checks on new or reset master passwords against a database of known breached credentials in order to ensure the password hasn't been previously exposed on the Dark Web."

This is also a really good feature. Most folks won't even realize that their information has been leaked unless they're seeking out the information.

LastPass notified customers today that they are now required to use complex master passwords with a minimum of 12 characters to increase their accounts' security.

I'm not an expert, but Steve Gibson is. He dumped lastpass.

grc dot com