If you use any type of password management app, especially LastPass, hopefully by now you are aware that LastPass was hit with another breach – their second in two years.
This breach included the attackers taking source code and proprietary data and not any user passwords, for now. The reason attackers would take the source code and technical information may be to study to find future weak entry points into the system.
LastPass doesn’t store your master password that can access your encrypted password vaults. This is a good use of zero knowledge architecture.
Updating your passwords after a breach is always a good idea, but the step of two-factor authentication is important here.