Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company responded

Back Itpro

Researchers called on LastPass, Dashlane, and Bitwarden to up defenses after severe flaws put 60 million users at risk – here’s how each company responded

Itpro •Nicole Kobie • February 17, 2026

Share: View original

Analysts at ETH Zurich called for cryptographic standard improvements after a host of password managers were found lacking

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerabilities in Password Managers Expose User Credentials Researchers from ETH Zurich and Università della Svizzera italiana identified vulnerabilities in four cloud-based password managers: Bitwarden, LastPass, Dashlane, and 1Password. These flaws could allow attackers to view and alter passwords stored in user vaults, undermining the security claims of these services, particularly regarding zero-knowledge encryption. Users of these password managers are affected by the potential exposure of their credentials. 16 sources 37

Extracted Entities

Companies (1)

Tools (2)

Bitwarden Dashlane