Password Manager & 2FA Change Watch

Why this is recommended

A breach disclosure that means changing 200 passwords, a free tier cut that locks a vault to one device, or an SMS 2FA deprecation before a bank lockout each is worth more than the fee.

What the Tab covers

Who it is for

The 100 million Americans who use a password manager and everyone who has been forced to set up two-factor authentication on a bank, email or work account.

When it runs

Password managers announce breaches, price changes and feature removals with short notice, and platforms change 2FA and passkey rules with OS releases

Scope

1Password, Bitwarden, LastPass, Dashlane, Keeper, NordPass, Proton Pass, Apple Passwords and Google Password Manager; Google Authenticator, Microsoft Authenticator, Authy and Yubico; passkey and 2FA policy changes at Google, Apple, Microsoft, Meta, Amazon, PayPal and major banks; CISA and security researcher disclosures

Suggested task

The objective your Tab starts with. You can edit every line of it once the Tab is yours.

Password manager breaches, security audits and vulnerability disclosures, price and plan changes, free tier restrictions and feature removals, passkey and 2FA rollouts and requirement changes at major platforms, SMS 2FA deprecations, account recovery and lockout policy changes, authenticator app changes, and migration deadlines from discontinued services, with the service and the change first.

Track account security tools for US consumers. Report only confirmed, source-backed items from the last 7 days: breaches, security incidents, audits and vulnerability disclosures at 1Password, Bitwarden, LastPass, Dashlane, Keeper, NordPass, Proton Pass, Apple Passwords and Google Password Manager; price, plan and free tier changes with effective dates; feature removals and device limit changes; passkey rollouts, 2FA requirements and SMS 2FA deprecations at Google, Apple, Microsoft, Meta, Amazon, PayPal and major banks; authenticator app changes and shutdowns at Google Authenticator, Microsoft Authenticator, Authy and Yubico with migration deadlines; account recovery and lockout policy changes; and CISA guidance on authentication. Prefer vendor announcements, security advisories, platform help pages and CISA sources; ignore unverified breach claims. Put the service and the change first in the title. Use high severity for a breach, a free tier restriction, or a 2FA change that could lock users out within 30 days. Return no more than 6 findings. Push each as a finding with a title, a two-sentence summary, sections for what changed, who is affected, what to do, the deadline, and the source link. If nothing qualifies, push nothing and submit the run receipt.