Lastpass is a huge target for hackers so you better use an offline password manager. I'm a huge fan of KeePass which lets you use a key file in addition to a password and can be synced between devices.