Dashlane users locked out after brute-force attacks target password manager accounts

Dashlane said attackers tried brute-force attacks against selected accounts to defeat two-factor authentication and add new devices.

Those attacks triggered security controls, leading to account suspensions and login issues for some users.

Dashlane said its own systems were not breached, but fewer than 20 personal users had encrypted vault copies downloaded.

The incident highlights how account-takeover attempts can still disrupt a password manager even without a core system breach.