If we choose to still use LastPass, what are the best practices to make these exploits less usable? They have some at the bottom, but I was wondering if they missed any.<p>Looks like there is an option to disable store dOTP on each machines? Kind of a pain to change on every device, but OK. Sounds like a good idea. What else is there?