LastPass will enforce a 12-character minimum master password
theverge.com
theverge.com
Companies that respect their users give their users the tools to do things right but don't dictate what right is for all users. This is just a way for them to act like they are more secure than they really are because it would never make the news if someone's three character password with no two-factor was breached because it's simply one account and everyone would understand it wasn't LastPass that had the failure it was the user.