Dashlane Users Compromised as Hackers Bypass Two-Factor Authentication

Published on June 2, 2026

For many users, Dashlane represented a reliable security solution for managing passwords. Its two-factor authentication (2FA) system served as an essential layer of protection, ensuring that accounts remained secure against unauthorized access.

This status quo was shaken when an external attacker launched a successful brute-force attack against Dashlane’s 2FA. This intrusion, which occurred on May 31, allowed the hacker to access fewer than 20 personal accounts and download encrypted password vaults, raising alarms about the effectiveness of the security measures in place.

In response to the breach, Dashlane triggered automatic account lockouts for a wider group of potentially affected users. The company’s disclosure confirms that even with robust security features like 2FA, vulnerabilities still exist, highlighting limitations in current password management strategies.

The impact of this incident extends beyond immediate account compromises. Users are left questioning the safety of their stored data, while Dashlane faces scrutiny over its security protocols. As companies navigate the evolving landscape of cybersecurity, the incident serves as a stark reminder of the persistent threats posed .

Related News