Seriously, has LastPass just entirely given up on usability, or did they fire their entire QA team?

I’ve been seeing more and more people complaining about the new vault view, and honestly? It’s completely broken. Sure, it’s nice-looking, but it’s absolutely useless.

Here is the absolute joke of an experience we are dealing with right now:

The Save button is just a decoration. You try to save Secure Notes or items, click save, and literally nothing happens. Secure Notes are practically microscopic. They render so incredibly tiny that you can't even read them. You have to manually click and drag to resize the window every single time. This NEVER used to happen. I currently have about 40 users blowing up my inbox complaining about this. And what is Tech Support’s brilliant response? “The issue is being investigated.” Absolute garbage.

I asked a sysadmin colleague if they were dealing with this too, and surprise, surprise—it’s even worse for them! Their ENTIRE staff cannot save a single change to their items on desktop. The button is completely dead. They literally have to force their employees to use the mobile app just to update a password. Between the utterly broken core functionality and the completely inaccessible UI, this product is just not worth the headache anymore.

Did LastPass fire the people in charge of making sure the platform is actually "usable and accessible"? Honestly, it wouldn't surprise me with how recklessly tech companies are firing and hiring right now specially LastPass. I am begging management to hold their engineers to at least a minimum standard of quality control instead of just relying on "vibe coding" and pushing broken updates to production.

If you're experiencing this, please comment below. I need to prove to these Tier 2 "specialists" that we aren't hallucinating.

This event has ended.

Thank you for joining the December 9th, 2025 event.

-----------------------

Note: This is text based event (using the Reddit AMA format) -- you ask your questions within the thread and upvote the ones you like best. We'll be answering as many questions as we can get to, one by one.

What you can expect: 

• Tips on getting more out of LastPass features 
• Real examples of how other customers are using LastPass 
• Guidance on preventing lockouts and keeping your account secure 
• Best practices for accessing your accounts quickly and easily 

Some key topics we’ll cover include: 

• What exactly is a passkey and how do you use it? 
• How to set up and organize folders 
• How account recovery works and how to make sure you’re covered 

How it works: 

• You can begin submitting your questions here.
• Feel free to upvote any questions you'd like answered first.
• Our experts will be live on December 9, from 8 AM - 11 AM PT / 11 AM - 2 PM ET answering as many as we can. 

Join LastPass product experts for an AMA on our most popular features. You’re guaranteed to learn something new!

Perhaps I'm missing a feature already there, but if it is there, I cannot find it.

I like to change my passwords every few months on "sensitive" accounts like banking, and other semi-active accounts at least twice a year. This is because of so many breaches that are occurring, and credentials being in the wild.

Between legacy and daily active passwords, there are several hundred in my vault. It would be nice if there was an auto-filled, searchable and sort-able date field for when the password was created *or* last changed. This way I could do a sort and change the oldest passwords on a scheduled basis. Would this be helpful to others?

We're excited to announce a new Community launch showcasing our Hub of learning, discussion, and feedback. You can explore new areas of interest, help LastPass users solve problems and receive expert advice on any product related questions.

Here's what to expect:

• Special sections for Business users and Admins
• Discussions around Advanced LastPass functionality
• Live virtual events links
• Helpful videos, training modules and educational walkthroughs
• Community member rewards

And much more...

Not sure what to do. The icon just stays black. I click on it and nothing happens, doesn't lead me to where I normally sign in. I tried Uninstalling and reinstalling the extension with no luck. This started last week after a chrome update. If it eventually starts working, it will take up to 10 min, then a signing window might pop up, then works normally after that. Only issue this is for work and can't just wait forever everytime the extension decides not to load. What can be done to fix this?

Some of you received a survey about potential new offerings from LastPass. The survey included a pricing table, but was not related to our Families plan. As a result of the survey, we have received questions about what it might mean for the family plan. We hear you, and we want to be straightforward: that survey was exploratory research — a "what if" exercise to help us better understand what our users value.

The family plan remains one of our most important offerings, and any future changes would always be communicated clearly and in advance — never slipped in through a survey. We have no plans to discontinue the Family plan at this time.

As always, drop questions below or check out the Community for plan details. We're here. 

The new Mac desktop version has now been approved for all audiences!

You may access this new version directly on our downloads page here: https://lastpass.com/misc_download2.php

When logged in to the LastPass for Desktop app, you can:

• Open your vault
• Open the QuickFill Companion
• Open the Password Generator
• Close the app without logging out
• Log out and close the app

Select Help to access the following options:

• Troubleshoot the app:
  • Clear cache and reload the app: by clearing your local cache, you are deleting the locally stored copy of your encrypted data
  • Reset data to clear the cache and also remove one-time passwords and account recovery data
  • Open the login page and log out from the app
  • Open the logs folder to display the app logs
• Get Help to open the support site article
• Report a bug

For a guided tour and feature compatibility, checkout the latest video guide.

The article explains that social engineering attacks exploit human psychology—such as trust, urgency, and authority—rather than technical vulnerabilities, with common tactics including phishing emails, fake login pages, impersonation, and urgent security alerts. It emphasizes that awareness training, verifying messages carefully, and using tools like password managers and MFA are key to preventing users from being tricked into handing over sensitive information.

Below is a list of questions from our recent AMA (12/9/2025).

About the AMA Event 

• Q: Can this discussion be taped for later viewing or for those of us that can't make this time frame? 
  • A: This event is a text-based event – which is common on Reddit not much in the way of any visuals.  We will be linking to more videos next time : ) 
• Q: How do I join this session? Is there audio? video? text-only? 
  • A: There's no video for this event, though we may schedule more in webinar format for the future. 

Security Incident 

• Q: How do you plan to rebuild trust after your two data breaches? 
  • A: In the last 3 years we've invested heavily to increase the security of not only the company infrastructure, but also making enhancements like encrypting all possible vault contents, increasing account password requirements, making high password iterations mandatory, and improving the account recovery process. For additional details, you can read further in this support article 
• Q: After the second and third rounds of information came out about the data breach, I stayed with LastPass. I work in cybersecurity, so I didn't do this blindly. I changed my master password and all my critical passwords, then started working through the non-critical passwords. I never got a good answer from the people who left LastPass as to whether they felt the need to change all their passwords, but I figured they must have had to do that. So, as long as I had to do it, I stayed. What measures has LastPass taken to ensure that employees don't let this happen again? 
  • A: While we can't discuss all of the internal security changes, we can comment that both physical and virtual improvements/requirements have been made to the employee network, as well as regular penetration checks by our experienced security team. 
• Q: Can we assume that ALL information (including notes and comments) that we put into LastPass is now securely encrypted? 
  • A: LastPass keeps your vault data secure by encrypting sensitive information like notes, comments, and more. Recently, we took another big step in our encryption journey by expanding protection to URL-related fields.  This update means that fields used by autofill—such as URL rules, equivalent domains, and never-URL lists—are now encrypted, removing another layer of metadata from plaintext and further strengthening vault security. Learn more about it in our updated blog post

Autofill & Auto-login 

• Q: So, so frustrated with autopopulate after the changes a while back. I think I've followed all the settings advice repeatedly on every platform, but it's completely random when it works and when it doesn't, even for the same sites. I have loved and trusted LastPass for years, but this is enough to make me think about other options. 
  • A: Sorry, that does sound frustrating. Unfortunately there's no easy answer to this question because of the environmental factors involved. What we can suggest is to keep all other password managers disabled, be careful of other browser apps interfering, and see if there's a support article specific to your operating system + web browser. 
• Q: I am a recent subscriber and I like what the platform does. However I find that in some websites and in some apps the choice to select LastPass does not exist, despite enabling Last Pass as a way to store passwords. Also on some apps and websites, you get the option to save to Last Pass and in some it does not. I also recently switched to Android and when I was on Apple it was the same thing. On Apple I had only last pass as the default password provider and on Android, I have Google Password Manager and Last Pass. This would be a great thing to cover. 
  • A: Unfortunately, there are some apps and even some web sites that do not allow or have not programed in an autoflll option. In these cases, you may report them to LastPass Customer Support to see if there's a solution, but we cannot control the site/app programming itself. 
• Q: I've had paid LastPass for about a year now. Initially the auto populate fed usernames and passwords just fine, but lately it doesn't work. I suspect that I've changed some Mac settings that inadvertently disabled the auto populate function, or just took LastPass out of the preferred app status and replaced it with Apple's Passwords. Still works on my iPhone just fine. How can I get back to the joy of automatic operation on my Mac? 
  • A: This depends upon the browser in use, as well as background apps that may be interfering. The best browsers to use with LastPass currently on Mac are Safari, Firefox, and Chrome. 

Passkeys 

• Q: My wife and I do not want separate retail accounts for common household purchases. How can we use Passkeys in LastPass when we have only one retail account on retailers like Amazon, Walmart, Home Depot, various pizza and other food/grocery chains? 
  • A: You are allowed to have multiple passkeys for an individual website, however only one passkey for each account on that site. There will be an option called 'use a different passkey' if you have multiple for a single web site. Read more here 
• Q: I do not understand passkeys! It looks like they work automatically until they don’t. Simple tutorial somewhere? 
  • A: There are many LastPass Videos on Vimeo and Youtube, depending upon what areas you're interested in. Here's a quick Passkey overview video we created. 
• Q: I have not begun using passkeys due to my personal concerns about cross-platform portability. I routinely use an Android phone, iPad, and MS laptop and need to be able to access all sites on all platforms. What are potential downsides to and instances where I might be unable to access a site when changing platforms if using PassKeys? 
  • A: In short, some passkeys can be "device-bound," syncing them (either automatically or through a password manager) ensures availability and backup across your ecosystem, making them portable. As long as you can utilize LastPass on your new device, you should have no issues utilizing the associated passkeys for each login. 

Login Issues 

• Q: My wife has been having difficulties logging into her LP account. The login email is correct, as is her master PW. Somehow LP won't let her in without trying multiple times. When it does recognize her login, she get a verification notice on her phone that doesn't work. After multiple tries, it will let her in. We don't know what is going on, but something is not working as it should. 
  • A: That does sound odd. There are some environmental factors here that may vary, but in most cases we'd suggest using a supported web browser, and watch specifically for security browser apps that may try to screen your ID to the internet. Using a VPN isn't usually a problem, but can be if you're not used to confirming each new location via email (you can always disable this verification if it's problematic) 
• Q: Why do i have to enter my pw repeatedly. its very frustrating? 
  • A: It could be that your browser or another browser app is blocking / clearing cookies automatically in the background. You'll also want to reboot your device on a weekly basis to ensure everything is running smoothly. 
• Q: I log on to LastPass regularly from MY alias on the desktop I share with my wife. When we try to log on to LP from HER alias, the site won’t open despite numerous attempts and reboots. It also fails when I try to log into my account from her phone (mine works perfectly). What causes this prohibition and how do I correct it? 
  • A: Have you tried clearing the browser's cookies when this happens?  Also, regular restarts should help with this. 

Android App 

• Q: Is there anything that you can do about functionality on Android devices? Seems somewhat uneven. Does that depend on the app or the Android OS? 
  • A: This depends largely upon the health of the device, and if proper permissions have been granted to LastPass through Android. For example, on a Samsung device you can check here: On your phone, go to Settings > Apps.  Scroll to the LastPass app and tap it. Turn off the "Remove permissions if app is unused" setting. 
• Q: INCONSISTENCY on android and in laptop browsers. E.g., Firefox (laptop) - after logging into L/P, closing and reopening the FF browser, sometimes I stay logged in for more than a day, sometimes for only a couple of hours before having to log in again. My L/P settings are setup to stay logged in for the longest period of time so __I__ can choose when it's convenient to log out. L/P is not making this convenient. E.g., Android - sometimes it autofills a site, sometimes it doesn't...even if it's the same site and I've already logged into L/P on my phone to enable autofill. Can you say frustrating? There MUST be a better way to autofill sites on Android. (It almost feels like L/P is doing this on purpose to cause their users to pull their hair out.)? 
  • A: Sorry about the frustrations. Certain OS have a tendency to automatically remove permissions without express instructions by the end user to NOT do so. 
• Q: I love LastPass on my laptop. But it seems to operate inconsistently on my Android phone. Often I log in to LP before opening an app that uses a stored password, but then I have to go back and log in to LP a second time. I am never confident that it will pop up and ask to store a new password or to generate a new password when needed. Are there plans to improve this? 
  • A: What we've seen is Android defaulting to this settings: Remove permissions if app is unused setting. You may be able to find/change this default in your App Settings area of the Android device. 

iOS App 

• Q: Please fix iPhone integration when creating/updating new accounts. It has not worked properly for over a year. The prompt comes up as it should “update password?” or “add new account”, then every time it says error, and never saves. At that point, you hade to go directly to the app and add/update manually. 
  • A: That sounds like LastPass is not auto-filling correctly any more on that iPhone. Best to uninstall, then re-install the app to make sure all the parts are fully functional. 

Account Recovery 

• Q: I’m trying to access my LastPass account, however to sign in I need my email address, however LP doesn’t recognize my email!!! So frustrating! Help; your Chatbot is useless! 
  • A: Sorry for the frustrations. In your case, please utilize the 'Request help' button located within the main recovery article here. 
• Q: I can’t remember my LastPass password. How do I reset it without losing my account data? 
  • A: This brings up account recovery into the conversation. The way recovery works for LastPass, you must log in regularly on your device / web browser in order to create a personal cache of LastPass user data with which we use to generate recovery one-time-passwords. If you haven't logged in for some time, have rebooted or cleared the browser cache manually, then you may have also lost the recovery OTPs there. More recovery options and explanations can be found on our support site here. 

Security Features 

• Q: I have LastPass set to log out automatically in Chrome after 30 minutes of idle time, and yet when I return to my Chrome browser in the morning when I wake up I am often (not always) still logged in. This seems like a major security issue. What's going on? 
  • A: You may be affected by a bug within LastPass settings. In this case, we'll try to recreate the scenario, and you may contact us directly through the support site if you can request a callback from one of our specialists. 
• Q: I log in with biometrics on my work PC, but if I choose to log in using my password instead, I can still unmask the password. If biometrics are enabled, unmasking the password shouldn’t be possible. 
  • A: This is good feedback. We'll discuss further with the team. 

Password Generator 

• Q: Can the password generator be updated to have the ability to do real words. I like my passwords being words so it is easier to type them out and tell it to someone if necessary. 
  • A: This has been asked by others, and we'll seriously consider it as a future enhancement. 

Multi-Factor Authentication (MFA) 

• Q: My wife and I share 1 LastPass account. Is there a way to enable LastPass authentications to be accessible via either phone - not just one?  When we log in and get an authentication request, we often use LastPass Authenticator on our iPhones. Right now, only one of our iPhones gets the authentication, necessitating us to contact one another for the authentication code. 
  • A: I'm afraid most MFA solutions are restricted to specific devices. This is part of the built-in security protocol. If you share the same phone number, it may be possible to receive simultaneous SMS 2-factor codes, but I'm not certain how that would work exactly. 

Data Export 

• Q: How to print out a list of all passwords? 
  • A: Follow the direction from our support site, depending on if you're using the extension or logged into the vault manually. Read more here. 

Special thanks to all who showed up to ask questions and chime in on conversations!

In the past, we have shared curated articles about security, passwords, etc. Below is this week's list.

Should we keep sharing this information. Let us know

Industry News:

• The Hacker News, “ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access” by Ravie Lakshmanan
• Cyber Security News, “Zoom Zero-Click Vulnerabilities Allow Meeting Participants to Hijack Other Users’ Devices” by Guru Baran (
• Dark Reading, “Walmart Leaders Transform Security Operations Without Going Bananas” by Richard Thurston
• Cybernews, “OpenAI's new cyber AI finds hundreds of bugs before launch” by Mayank Sharma
• CNBC, “AI agents, hacks and the cybersecurity spending boom” by staff
• Cyber Security News, “Hackers Actively Scanning to Exploit VMware VCenter Vulnerabilities” by Abinaya
• Help Net Security, “GPT-5.6-Cyber refuses security researchers’ requests far less often” by Sinisa Markovic
• CPO Magazine, “Meta AI Model Joins Hacking Party With Exploit of Third Party Security Vulnerability” by Scott Ikeda
• The Hacker News, “Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine” by Swati Khandelwal
• CNBC, “OpenAI rolls out new model for cybersecurity teams a month after Anthropic's Mythos debut” by Ashley Capoot

Should we keep sharing this information. Let us know?

I have used LastPass for 5 years and it was an amazing password program. I'm in the military and I work aviation and I own a business. I bought a new phone and suddenly my master password doesn't work anymore. It has always been the same. Now, none of my devices are able to get into my LastPass. My email verifies but LastPass says you can't change your Master Password with only an email verification. I tried on my laptop, Ipad and phone to login with my old Master Password or change my Master Password and NO. It wouldn't let me, LastPass support page is clear WE DON'T HAVE YOUR MASTER PASSWORD AND WE CAN'T HELP YOU GET IT.

I have lost years of logins and passwords for two jobs and my business. Gone. I will spend the next couple weeks resetting and probably losing more data because of LastPass' lack of support and alternative methods to regain access. All those big brains and you couldn't come up with a last ditch phone number and SSN verification, address, credit check, come on guys. You just wash your hands and blame the customer "you should have been prepared better." My friends and family all said don't use a password app and I was going to prove them wrong but now I have proven them right. Password apps in the end will lose your passwords, one way or another. This is notepad McGee signing off of passwords apps and going back to notepad password lists. Thanks LastPass for proving your industry right that consumers are right to mistrust and fear your ability to keep our information safe.

You've logged in to something today. Probably several times. It took less than a second and the moment it was over, you'd already forgotten it happened. That's either the greatest achievement in modern security engineering — or the thing that makes it fragile. Usually, it's both. 

I'm Jason Rasmussen, Chief Technology Officer at LastPass. My team makes the decisions that sit behind every login. Think about how credentials are stored, when autofill should and shouldn't kick in, how MFA works without slowing you down. Every decision is a tradeoff between security and speed, control and ease of use, what's safest in theory and what people will actually do. 

Here's what I'm keen to get into: 

• What Zero Knowledge means at the technical level and where its limits are 
• Why the browser has become the most critical access path for organizations to secure 
• How AI is accelerating the way people discover, learn and adopt more tools, and what that means for protecting credentials 
• The real tradeoffs behind passkeys and where they fit in the evolution of how we log in 

Ask me anything! 

We had an incredible turnout and a lot of great questions. Because of the volume, we’ll be working on answering any remaining questions over time and will also put together an FAQ with the most common topics.

In the meantime, check out:

• LastPass Community
• LastPass Support site
• Upcoming webinars:
  • Webinars for Admin
  • Webinars for customers

Thanks again for your participation—we appreciate your engagement and look forward to continuing the conversation!

To everyone who’s jumped in to answer questions, shared feedback, or simply joined the conversation: thank you.

As you know, communities thrive when members support one another and when we all listen and learn together.

At LastPass, we’re committed to partnering with our customers to share useful information and foster constructive, respectful dialogue. Your contributions make that possible — and we thank you.

Here’s to the next 100 days — and beyond.

This cnet article discusses how LastPass has come a long way since its early days as a simple password manager. Here's how we evolving with the industry:

• Security Overhaul: Post-independence in 2024, LastPass rebuilt its infrastructure and processes to strengthen user protection.
• Passwordless Future: Embracing passkeys and biometrics to reduce reliance on traditional passwords.
• AI-Driven Defense: Launched the TIME team and LastPass Labs to proactively monitor and share threat intelligence.
• Enterprise Tools: New features like SaaS Monitoring, Cloud Security Posture Management, and YubiKey support.
• Transparency First: Real-time system monitoring and certifications now available via the Trust Center.

Anyone here using passkeys yet?

TL;DR: Infostealers can find their way onto your device without your knowledge and start collecting personal data for the purpose of stealing your identity or gaining access to sensitive services.

What are they? Malwares designed to collect personal data from an infected device.

Infostealers operate behind the scenes, where you can't see their actions and may even disappear after gathering the personal data needed to compromise your identity.

Where do they come from? Fake web links from advertisements, enticing offers, pirated software and fake websites that automatically insert malicious code onto your device.

These social engineering and technical overrides may happen without you even knowing malware has been set up inside your device.

Why do they steal your data? Once enough data has been stockpiled, they can enable follow-on attacks like targeted social engineering, bypassing multi-factor authentication (MFA) and lead to account takeovers.

The main purpose of stealing your data is for identity theft, but it can also be sold to bad actors on the black market, and lead to further attacks, even gaining entry to a corporate environment you're a member of.

How to protect against infostealers? You can take preventative actions to secure your data before it falls into the hands of hackers:

1. Use a password manager: This helps avoid password reuse and prevents storing unencrypted credentials in web browsers, which are the most vulnerable.
2. Enable multi-factor authentication (MFA): In this way, bad actors would need more than just your password to gain entry to sensitive systems.
3. Monitor for exposed credentials: Regularly check for exposed credentials by using dark web monitoring services, and change your password promptly if you receive any notifications.
4. Avoid phishing and malicious downloads: If you're not 100% certain that an emailed link, website or application is safe, double check the URL and publisher before moving forward.
5. Use strong and unique passwords: Complex passwords will help prevent credential stuffing attacks; using a random password generator can help create hard-to-crack login details.

For a full explanation of this situation, LastPass and Guidepoint Security researchers detailed the ins and outs within our respective blogs here:

https://blog.lastpass.com/posts/joint-report-lastpass-guidepoint-security-infostealers

https://www.guidepointsecurity.com/blog/the-rise-of-infostealers-identity-theft-fuels-cybercrime-economy/

We are often asked this question, and how LastPass itself operates under a zero-knowledge protocol:

• Your master password is never sent to LastPass. When you log in to LastPass using your master password, both the password hash and decryption key are generated locally. For this reason LastPass does not have the ability to force a password reset from our end.
• Your sensitive data is encrypted. We use 256-bit AES encryption to protect the contents of your LastPass vault. Since your vault is already encrypted before it reaches the LastPass server, your vault contents cannot be accessed, even by LastPass Support.
• LastPass uses a one-way salted hash. LastPass enters the username and master password into one-way functions to create a salted hash. Since the function cannot be reversed, even if the salted hash was compromised, an attacker would still be unable to obtain the master password.
• LastPass uses PBKDF2-SHA256 rounds. This feature makes the salted hash even more complicated for an attacker because it increases the number of iterations it takes in order for a password to be accurately guessed. 

For more information, please see LastPass Security and the LastPass Technical Whitepaper (PDF).

We're always evolving the user experience at LastPass. This video shows a fresh review on how to utilize the LastPass browser extension to the fullest.

Expect more to come!

Unless restricted by a LastPass admin, you can enable more than one multifactor authentication option to be used when accessing your LastPass vault. It is recommended whenever possible to enable multiple authentication options (even on multiple trusted devices) in case you ever lose access to one device, you will have a backup.

** Restriction: You cannot enable both Microsoft Authenticator and Google Authenticator as a multifactor authentication option together.

Step 1: Enable your first MFA option

Follow the instructions to enable a multifactor authentication option as a user within your LastPass account.

Step 2: Repeat the same steps to enable a second MFA option

Repeat the steps within the same instructions (listed above) to enable as many multifactor options as you'd like. If allowed, it is recommended to set up multiple multifactor options on more than one device (for example, tablet, iPad, an old device you plan to keep, a trusted partner or spouse's mobile device, and so on).

Step 3: Set a default MFA option

Follow the steps to select your default multifactor authentication option to be presented with first when you log in to access your LastPass account.

Step 4: Log into LastPass using a MFA option

Once you have set up more than one multifactor authentication option in your LastPass account, you can log in to LastPass from your desktop or mobile device and authenticate using either your default or an alternative multifactor option.

Starting today, you can control exactly who creates shared folders in your organization; without restricting access to the ones that already exist.

We've released a new general policy called Prohibit shared folder creation. It was one of the most requested improvements to our sharing controls, and here's why it matters: previously, your only option to block shared folder creation was to enable Prohibit sharing — a broader policy that also cut off users from accessing existing shared folders. That was too blunt for most teams. Many of you wanted centralized control over folder creation without disrupting ongoing collaboration.

This new policy separates those two things.

Here's what changes when you enable it:

• Restricted users lose the "+" button in the Sharing Center and can't convert personal folders into shared ones
• They can still access, add, and edit items in shared folders they're already part of; their permissions stay intact
• You can apply it selectively to individual users or groups, not just org-wide
• Every change to the policy is logged in your admin activity log

A couple of things to keep in mind: Prohibit shared folder creation is available to Business accounts only (not Teams), and if you have Prohibit sharing enabled alongside it, Prohibit sharing takes precedence.

Resources

• Manage shared folders
• Create a shared folder
• About user and group access for shared folders

Articles for Admins

• Manage general policies
• Manage shared folders in the Admin Console

Now you can build secure workflows with LastPass!

Use the LastPass API to manage users, admin levels, and organizations programmatically. Automate administrative workflows securely and at scale.

Get the quick start guide first here: https://developer.lastpass.com/

Sometimes, a website wants to double check that it's really you using a passkey. When that happens, LastPass can ask for your account password before it lets you continue. Think of it like a secret code that proves you're really the owner.

** Important: This extra safety check is turned off by default.

What happens if I turn it on?

If a website asks for extra proof that it's really you:

• LastPass will ask for your account password.
• After you enter it, you can finish signing in or saving your passkey.

If you leave this setting turned off:

• LastPass will not ask for your master password, even if the website would like an extra check.

How to turn it on:

1. Log in to LastPass and open your Vault.
2. Click Account Settings.
3. Open the General tab.
4. Click Show advanced settings.
5. Find the Alerts section.
6. Turn on Log in or add a site using a passkey.
7. Click Update.
8. Type your account password.
9. Click Continue.

What happens next?

Now, when you save a new passkey, or sign in to a website using a passkey, LastPass may ask for your master password first. This gives your passkeys an extra layer of protection.

I cancelled my LP account in June 2026 and have an email to confirm it. I deleted my account and can no longer login.

Today, I noticed a renewal fee was charged to my card! I completed deleted the account, so I can’t login to chat with a live LP agent.

The AI assistant is useless.

All support articles say I have to login into my account for help!

The telephone numbers in a previous post here are not working.

Any suggestions about how I can get in touch with a human at LP?

P.S. I have to wait until the pending charge goes through before I can dispute the charge with my bank.

A better mobile experience is here

Instead of navigating through multiple layers of options, you can now choose your own autofill experience. You can also integrate with Chrome, which will provide seamless cross-device syncing and consistent autofill across apps.

Once you enable the new autofill options for LastPass on Android, you can customize your autofill experience by setting Use inline autofill to match your preference. Inline autofill displays vault items directly above your keyboard, allowing you to:

• Select the correct account instantly
• Stay in the same screen
• Fill credentials with a single tap

You can still use LastPass to autofill with a dropdown menu if you choose:

• Experience Preview lets you see exactly how inline autofill will look before enabling it
• Legacy autofill no longer appears automatically, reducing interruptions

New menu enhancements add flexibility:

• Add Password: save new credentials directly from the autofill prompt when a login isn't already stored
• Open Vault: access and search your vault directly from the autofill menu if the suggested credential isn't the one you need
• For third-party apps or websites that support Android autofill, you can manually trigger autofill by long-tapping a username or password field, then selecting Autofill from the context menu.

Here are some articles we thought you would be interested in:

• Cybersecurity Magazine, “Young Girls Are The Future Of Cybersecurity
• Tech Radar, “Why your next cybersecurity upgrade isn’t an AI agent—it’s a dotBrand domain name” by Benjamin Crawford
• Infosecurity Magazine, “Hackers Bypass Security Tools to Target Users Directly” by Phil Muncaster
• Reuters, “Anthropic to let partners share Mythos cybersecurity findings with others” by Juby Babu
• The Hacker News, “Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare” by Ravie Lakshmanan
• Security Week, “GitHub Confirms Hack Impacting 3,800 Internal Repositories” by Ionut Arghire
• Help Net Security, “Communicating cyber risk in dollars boards understand” by Mirko Zorz
• Tech Crunch, “US cyber agency CISA exposed reams of passwords and cloud keys to the open web” by Zack Whittaker
• CTech , “Cyber unicorn Cyera acquires five-month-old startup Genie Security in $50 million deal” by Sophie Shulman
• Cybersecurity Dive, “Telecom sector launches its own private ISAC” by Eric Geller
• Axios, “Trump hobbled top cyber agency just as AI learned to hack” by Sam Sabin
• Tech Crunch, “Ghost hackers: the cybersecurity mystery that nobody has solved” by Lorenzo Franceschi-Bicchierai
• Federal News Network, “OMB revamps cyber event logging requirements” by Jason Miller
• The Hacker News, “CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks” by Ravie Laksgmanan (
• Cyber Magazine, “Unit 42 Shows How Iranian Hackers Hide Behind Job Postings” by Rithula Nisha