LastPass is making mandatory changes to its user accounts, requiring all users to update their master passwords to a minimum of 12 characters.