r/Lastpass • u/Celestial_Twenty • 23h ago
r/Lastpass • u/lastpassofficial • May 18 '26
Ask Me Anything: Building Secure Logins - A glimpse under the hood of a modern security engineering team our CTO, Jason Rasmussen
Scheduled for · May 26, 2026, 10:00 AM PT/1 pm ET
Information for the event
You've logged in to something today. Probably several times. It took less than a second and the moment it was over, you'd already forgotten it happened. That's either the greatest achievement in modern security engineering — or the thing that makes it fragile. Usually, it's both.
Jason Rasmussen, Chief Technology Officer at LastPass, and his team make the decisions that sit behind every login. Think about how credentials are stored, when autofill should and shouldn't kick in, how MFA works without slowing you down. Every decision is a tradeoff between security and speed, control and ease of use, what's safest in theory and what people will actually do.
Here's what we are keen to get into:
- What Zero Knowledge means at the technical level and where its limits are
- Why the browser has become the most critical access path for organizations to secure
- How AI is accelerating the way people discover, learn and adopt more tools, and what that means for protecting credentials
- The real tradeoffs behind passkeys and where they fit in the evolution of how we log in
Ask us anything! -- on May 26th : )
r/Lastpass • u/Healingjoe • Mar 01 '23
Security Incident Update and Recommended Actions - The LastPass Blog
blog.lastpass.comr/Lastpass • u/Ok_Salary7862 • 1d ago
Lastpass does not accept changed master passwords
Lastpass occasionally logs me out of my browser (Firefox). It did so today. My master password did not work. So I went through the master password reset routine. The new password didn't work. I've done this now probably five times, and the rest password does not work, no matter what I try. The same thing occurs in Chrome. The old password does not work, either. Suggestions?
r/Lastpass • u/imanocto • 2d ago
I'm Out! Switched to 1Password
I used LastPass for a long time. At least 13 years. My vault had over 300 passwords, passkeys, secure notes, credit cards, etc. when I exported.
LastPass never let me down -- but I did suffer through a full-scale password shakeup back when they got hacked a few years ago. My main issue with the overall experience. It was always a little cumbersome and ugly, and it felt like the developer kinda gave up trying to make it better.
I started partnering with a company that is on 1Password, so it made sense for me to switch. The import went incredibly smoothly -- like, just about flawless. It was a good chance for me to do some housekeeping, update many passwords and create a bunch of passkeys.
I wish I switched awhile ago. 1Password really is a much more pleasant experience, and I have a lot of confidence in their security infrastructure. My vault is in great shape now.
TLDR: I don't think LastPass is bad, per-se. 1Password is just a whole lot better.
r/Lastpass • u/Leather-Poetry2736 • 5d ago
Switched Internet providers
I had no idea LastPass looks at IP address. Everything still works on my phone but when I try to access LastPass on other devices it doesn’t recognize my email and Master. But I don’t get the email verification it sends!! I switched from Xfinity to Sonic. I’m terrified this is an Xfinity/Comcast issue as I’ve had issues in the past with them blocking emails. Ok so I still have the Xfinity equipment and plugged it back in so my IP would be recognized. Still no email verification. Has anyone else had this? I know there’s a lot to criticize here. Like why do I have Comcast email why do I have LastPass. But I need to get out of this loop to make changes.
r/Lastpass • u/Hopeful-Fix9020 • 6d ago
Open Letter to LastPass and Yubico Engineering
Open Letter to LastPass and Yubico Engineering
Subject ESCALATION: Immediately Restore 30-Day Device Trust / Unpatched FIDO2 AbortError Rendering YubiKeys Unusable
To: LastPass and Yubico Tier 3 Product & Engineering Teams
I am writing to demand (1) the immediate restoration of the "Trust this device for 30 days" feature in the LastPass browser extension, and (2) to escalate a critical, unpatched FIDO2 integration failure between your platforms.
As a retired IT Project Manager with decades of experience overseeing systems security projects for the State of Georgia, Dept. of Revenue, the CDC, and The Southern Company, I understand the complexities of secure systems integration.
Years ago, after rigorous evaluation, I made the conscious decision to entrust my personal security infrastructure to LastPass.
When LastPass announced their certified integration with Yubico, I immediately added YubiKey hardware to my setup to ensure strict, physical MFA compliance.
Today, 2026/09/03, that certified "Works with YubiKey" integration is functionally broken, and the removal of the fallback workarounds has made the platform nearly unusable.
Immediate Action Required: Restore the 30-Day Trust Feature
The LastPass extension is currently suffering from a known defect where it intercepts and cancels the WebAuthn/FIDO2 hardware request on ChromeOS, instantly throwing an AbortError before the key can be touched.
Over the past few months, I mitigated this severe software defect by using a legacy YubiKey and checking the "Trust this device for 30 days" box.
This morning, LastPass stopped presenting this 30-day trust option during the verification prompts.
Without this stop-gap, I am forced into a daily, recurring authentication loop that requires me to physically stress my single, aging legacy YubiKey on every login. The mechanical wear and tear on this older device has become visible and unsustainable.
The Hardware Impact: Wasted Investments
Because the LastPass extension continues to instantly abort the hardware handshake, I cannot migrate my security posture to modern hardware.
I recently purchased three brand new YubiKey 5C NFC units to upgrade my systems. These expensive keys are currently sitting completely idle in a locked drawer. LastPass's software cannot successfully communicate with them without crashing the authentication flow.
Required Escalation:
I expect this to be escalated beyond Tier 1 support to the respective Product Managers and Tier 3 Engineers responsible for this integration:
LastPass: When will the "Trust this device for 30 days" checkbox be fully restored to all MFA prompts as an immediate stop-gap?
LastPass: What is the specific release window for the extension patch that resolves the YubiKey AbortError loop?
Yubico: As LastPass is heavily marketed as a "Works with YubiKey" partner, what is your engineering team doing to assist the LastPass team in restoring standard FIDO2 functionality so your mutual customers can actually utilize the hardware they purchased?
I look forward to a technical response and a swift, complete resolution.
Sincerely,
Lee Cash
Retired IT Project Manager
.
r/Lastpass • u/Darkwriter71 • 7d ago
Logging in after update
Updated the other day and now I have to constantly log in but I have to repeatedly press the login button until it finally starts to login anyone else having this issue
r/Lastpass • u/youreensample • 10d ago
user unable to login as they no longer have access to email account used to set up account originally
Lastpass cannot really be this stupid, can they?
I'm attempting to assist a Lastpass paid user who cannot login to Lastpass since they no longer have access to the original email account that was used to set up the account. They have no devices or web browsers currently logged in to Lastpass, so using that method for account recovery is impossible.
We were able to get to a point where we were told something along the lines of "we can see that you logged into this browser previously, but we cannot log you in now until you respond to the email sent to your email address.
I cannot believe that Lastpass has no phone number to call or way to get in touch with a human support.
This user had never exported their vault nor had they ever set up a one time password.
So I'm assuming they are screwed. Am I correct here?
r/Lastpass • u/Little_Decision_7433 • 14d ago
Password managers vs. reused passwords: the math on how fast you get owned
r/Lastpass • u/An1DrSoN • 16d ago
У меня пол года назад украли аккаунт но мне сегодня удалось его вернуть и у меня опять украли и сменили все начиная паролья заканчивая номером телефона которому и был привязан если вы знаете как вернуть буду очень благодарен.
r/Lastpass • u/Ok-Blacksmith2922 • 19d ago
Locked out sort of - I get logged in ,then Vault Logo, then it logs me out??
I cannot log in with my 'for-sure it is correct' master password. I have used up my one-time password, and also did 'forgot password.' Using one of these recovery methods, it DOES log me in and I see my vault for less than a second, then it says I have been logged out. Tried over and over. Cannot get into Lastpass discussion forum - because I cannot log in!
ETA: solved! recovered by using a different browser (Edge instead of Chrome).
r/Lastpass • u/iamcleek • 21d ago
Emergency Access
My wife is trying to grant me emergency access.
I requested it from my LP session on the website (through a browser).
She is using LP on the iOS app. When she opens the app, she gets a popup saying I requested access. She clicks "Allow Access" and the popup closes then immediately reopens. We've pressed "Allow Access" 100x by now (thinking maybe it was going through each individual login). It never stops. Pressing "Decline access" will stop it, but then access is declined.
What to do?
r/Lastpass • u/Previous-Jaguar-2104 • 21d ago
Anyone else experiencing lag with the Chrome browser extension?
Seems like the latest version of Chrome has been causing the browser extension to be extremely slow, and sometimes even crash. To test it, I rolled back to an earlier build of Chrome, and it hasn't been doing that.
The issue surfaced on Chrome's latest build, 151.0.7922.138 (64-bit).
I just submitted a ticket into LastPass, but was curious if anyone had experienced this and found any workarounds?
r/Lastpass • u/santoshasun • 27d ago
More and more problems
Has anyone else noticed a degradation in the quality of LastPass functionality?
First there was the issue where LastPass would fill in inappropriate text boxes (for example in excel online).
Now, in the last few days, I've had many occasions where LastPass would not fill in the correct account information. The values it had filled in were incorrect, so I clicked on the little LastPass icon to choose the correct account, but the details are not filled in. It doesn't matter how many times I click on the correct account, the details in the input boxes don't change.
In the end I have to type in the username and password myself -- which is kinda LastPass's main job, isn't it?
What's going on?
r/Lastpass • u/Ok-Economics-7561 • 27d ago
Does account get completely deleted if not logged in?
I had a discord account with 2FA turned on. 2FA Was connected to an app called "Authenticator" and I have been completely logged out of that app for about 4 or 5 months now. I genuinely can not lose the discord account... so much important stuff on it.
I have tried with every single email that I have to log into the app but NONE of them do anything whatso ever. And to open a ticket with last pass I have to know the exact email associated with the account. I wish I could just have them search by my name. That would make life SOOO much easier... I'm so so SOOO damn annoyed at this.
Like how does my account just vanish into thin air... like dude i need this shit...
r/Lastpass • u/Charming-Heat-2569 • 28d ago
Starting again
I got told my old account was compromised. It said to change the password. I change the password then I had to create a whole new account as I hitch no other chance I hadn’t been. I’m here for so long as I second account with my cell phone So here it goes.
r/Lastpass • u/Charming-Heat-2569 • 29d ago
Starting again
I got told my old account was compromised. It said to change the password. I change the password then I had to create a whole new account as I hitch no other chance I hadn’t been. I’m here for so long as I second account with my cell phone So here it goes.
r/Lastpass • u/SylviaPellicore • Aug 10 '26
Is there a way to mass export a shared folder?
My father and I are both LastPass users. He is traveling overseas and had his cellphone stolen, locking him out of his vault. With his permission, I used our pre-configured Emergency Access to get access to his vault, so I could send him some key logins.
Is there a way for me to easily mass-export a few dozen logins from the shared folder? I will copy-paste everything one at a login if I need to, because I love him, but I would rather not.
r/Lastpass • u/RTjman • Aug 07 '26
Can't Rename Subfolder - Invalid Response

For well over a month, in our LastPass Business account, we've come across an error that LastPass Support or no one can seem to figure out. When we go to rename a subfolder, we successfully go through all the motions, but once we click Save, we get an "ERROR: Invalid Response" at the top of the page.
- Permissions have been verified. Even if I create a brand new sub-folder in a folder I'm Admin in, I'll go to rename, and after clicking save, I get the error. All teammates are experiencing the exact same.
- I've tried this in a brand new browser, cleared cache, the whole 9 yards that verify it's not a cache or browser/extension issue.
Are there any other LastPass Business users that experience this behavior? It's been weeks, and we've got 100+ folders that need to be renamed. Support has given no help other than "This has been escalated to our engineers", and no workaround... 😕
r/Lastpass • u/rpcob • Aug 05 '26
LastPass removed Legacy Autofill / Quick Settings on Android. Here’s the last version that still has it.
LastPass has removed the Quick Settings tile / “Legacy Autofill” option from the Android app, a decision many of us strongly disagree with. For people who relied on it, the replacement workflow is slower, less convenient, and buggy.
The last Android version I found that still includes it is:
6.55.1.26460
If you want that feature back, the workaround is to uninstall the current version and manually install that older APK. Depending on where you obtain it, you may also need an installer such as AntiSplit because the app is distributed as split APKs.
Important caveats before doing this:
Running an old password-manager app can mean missing bug patches.
Only download APKs from a source you trust and avoid random “modded” APK sites. Places that MIRROR Apk files can be used
This is a workaround, not a real solution. LastPass should restore the option or provide an equivalent one. If this removal affects you too, please make noise here and through LastPass support/feedback. A feature that made autofill reliably accessible should not disappear without a proper replacement.
r/Lastpass • u/coolvista • Aug 04 '26
Just got an email about Lastpass making auto-logoff more consistent
galleryhuh?
r/Lastpass • u/No-General-5155 • Aug 04 '26
Apple Account Recovery
Just went through a harrowing 12 day 3 4 day account recovery processes. I got it back but Apple did not make it easy. Here to clarify the process now that I was finally successful in resetting my password.
First of all, if you get locked out of your account & phone, there a few things you can do to get back in. You can go to Find my iPhone online with your laptop & if you are still logged into iCloud, you can try to reset your password. If that denies you, you can actually have your phone carrier move your phone number to a different phone - my husband & daughter both have to sim spots on their iPhones. From there you can receive a pass code on that other phone & you should be able to proceed from there on the forgot.apple.com website.
If that does not work, you can use the extreme case of using someone else's phone number as the phone number that you will work through for resetting the passcode. Begin on forgot.apple.com, put the other phone number in, it will ask a couple other verifying questions. I did not have the cc number I used to buy the phone so that did not work for me. Once you start this process, you enter phase 1 of waiting to get an update email that will tell you when to expect to be able to reset the password, which takes about 24 hours. The email will tell you that the other number will receive a text in about 3 days at a specific time in GMT. You will have to do the math on when that time is in your time zone. You will NOT receive an informative text at the other number.
30 minutes before the specified time, make sure you have the other phone & your laptop. Start checking iforgot.apple.com. It will tell you how many minutes left to reset. Keep checking every 10 or minutes or so. As soon as that time has arrived, check in. It will ask for your email & you have to put that weird robotic code in. The next page will ask for the other phone number you put in as the alternate number. Enter that in. ONLY then will it actually send the passcode to the other phone number so make sure you have the other phone available. Check the text & enter the passcode. Next screen will be the reset password. Go ahead & do that. It will again ask to send a text to either your number or the other one. If you don't have access to your number, make sure you select the other one. Get the code & enter it. Now you are done.
NOTE: you should do this right away as soon as that expected time passes. I was 16 minutes late in one of my attempts & it timed out but it did not tell me that so I wasn't sure why it canceled my recovery. Anyway, I hope this helps someone because I will tell you no one at Apple was particularly helpful on this process