Security FAQs

  1. I read that LastPass is vulnerable to phishing attacks - should I be concerned?
  2. How do I change my master password?
  3. Does LastPass support two-factor or multifactor authentication?
  4. What happens when LastPass.com is down? Can I still log in?
  5. How do I see if I have duplicate or weak passwords?
  6. Help! I think my account has been hacked!
  7. What if my laptop or phone is stolen?
  8. How does the YubiKey compare to LastPass Sesame?
  9. How do I enable Yubikey authentication for my mobile device?
  10. If someone malicously put a keystroke recorder on my computer would they be able to see the master password for LastPass when I enter it?
  11. How does LastPass securely identify a trusted computer?
  12. How do I view a history of usernames and/or passwords for a site?
  13. My Antivirus program has warned me that LastPass is a virus/trojan/suspicious - should I be concerned?
  14. What is the security email address?
  15. How do I view the history of logins and events on my account (such as IPs accessing my account and logins used)?
  16. How are bookmarklets secure?
  17. If someone steals my LastPass master password, then can't they steal my identity?
  18. How do I use LastPass with Windows biometric framework (WBF)?
  19. Why doesn’t LastPass recognize my fingerprint reader?
  20. How do I use LastPass Sesame?
  21. What is a YubiKey and how do I use it?
  22. What encryption is being used?
  23. How does a YubiKey protect my LastPass account?
  24. My email address for LastPass is old or invalid - how to I re-enable my account?
  25. How is updating my Master Password secure?
  26. How many YubiKeys can I use with one account?
  27. Why does my browser indicate that LastPass has an invalid or expired security certificate?
  28. Can LastPass automatically change my weak/old passwords for me?
  29. How can LastPass help me thwart keyloggers when logging in?
  30. Do you use a salted hash for logging in?
  31. What are phishing scams and what steps can I take to protect myself against them?
  32. LastPass was supposed to send me an email, but it never came. Why?
  33. Can another browser extension or password manager capture data from LastPass?
  34. How does the fingerprint scanner work with LastPass on the Samsung Galaxy S5?
  35. My Local Vault is not showing a secure connection icon in the URL bar. Is my connection secure?
  36. What personal information is used for the credit monitoring alerts? Is it safe?
  37. How is LastPass secure and how does it encrypt/decrypt my data safely?
  38. I'm getting, "You must complete a security check before you are able to login to this site. Please do so, and then submit the form." alert, what is this?
  39. Why am I getting a notification from LastPass Sentry Alert?
  40. I have a charge on my credit card for your product, but I don't use it! How can I get my money back?
  41. Why am I always asked to enter my master password on certain actions when I'm already logged in?
  42. I am getting this message: 'LastPass detected a login form that is insecure', why?
  43. How can I update my settings so that I don't get certain emails from LastPass?
  44. Why is LastPass issuing requests to my server?
  45. How do I share login state between browsers?
  46. LastPass says I cannot login from a country. How do unlock a country?
  47. Has LastPass been audited?
  48. How do you handle brute force / dictionary attacks for my LastPass account?
  49. How can I inspect the network traffic that goes to LastPass?
  50. LastPass stays logged in even when I close my browser or restart my computer! How do I prevent this?
  51. Is there a limit for character length of the Master Password?
  52. Should I be concerned about reports that my master password can be stolen?
  53. How can I kill all logins for other computers/devices/sessions that I may be logged into?
  54. Why am I seeing "LastPass doesn't recognize this device or you are at a new location. Please check your email to grant access to your new device or location." ?
  55. I get prompted to verify my location but everytime I click on the new link it says the link expired.
  56. Why am I prompted to log in via lastpass.com even if I am already logged in via LastPass extension on Chrome?
  57. How do I protect LastPass if I'm worried about malware compromising my machine?
  58. Someone may have sent me a phishing email. What email address does LastPass use?
  59. How many failed login attempts can occur before a lockout?
  60. My IP address is correct but LastPass appears to be showing the wrong location?
  61. I am in India and I am not getting an SMS message confirm my mobile number, where is my text message?
  62. Should I logout or use Master Password Reprompt to protect my account?
Still Having Trouble?
Look for answers in our vibrant customer-to-customer community help forums.
Forums
View your account information and view the status of previously submitted support tickets.
View Tickets
Submit a support ticket and we'll get back to you as soon as we can!
New Ticket

Please review these answers to your question:

Still Having Trouble?
Look for answers in our vibrant customer-to-customer community help forums.
Forums
View your account information and view the status of previously submitted support tickets.
View Tickets
Submit a support ticket and we'll get back to you as soon as we can!
New Ticket

Browse through our FAQs: