Security FAQs

  1. I read that LastPass is vulnerable to phishing attacks - should I be concerned?
  2. How do I change my master password?
  3. Does LastPass support two-factor or multifactor authentication?
  4. What happens when LastPass.com is down? Can I still log in?
  5. How do I see if I have duplicate or weak passwords?
  6. Help! I think my account has been hacked!
  7. What if my laptop or phone is stolen?
  8. How does the YubiKey compare to LastPass Sesame?
  9. How do I enable Yubikey authentication for my mobile device?
  10. If someone malicously put a keystroke recorder on my computer would they be able to see the master password for LastPass when I enter it?
  11. How do I view a history of usernames and/or passwords for a site?
  12. How does LastPass securely identify a trusted computer?
  13. What is the security email address?
  14. How do I view the history of logins and events on my account (such as IPs accessing my account and logins used)?
  15. My Antivirus program has warned me that LastPass is a virus/trojan/suspicious - should I be concerned?
  16. How are bookmarklets secure?
  17. How do I use LastPass with Windows biometric framework (WBF)?
  18. Why doesn’t LastPass recognize my fingerprint reader?
  19. If someone steals my LastPass master password, then can't they steal my identity?
  20. How do I use LastPass Sesame?
  21. What is a YubiKey and how do I use it?
  22. What encryption is being used?
  23. My email address for LastPass is old or invalid - how to I re-enable my account?
  24. How does a YubiKey protect my LastPass account?
  25. How is updating my Master Password secure?
  26. How many YubiKeys can I use with one account?
  27. Can LastPass automatically change my weak/old passwords for me?
  28. Why does my browser indicate that LastPass has an invalid or expired security certificate?
  29. How can LastPass help me thwart keyloggers when logging in?
  30. Do you use a salted hash for logging in?
  31. LastPass was supposed to send me an email, but it never came. Why?
  32. What are phishing scams and what steps can I take to protect myself against them?
  33. How does the fingerprint scanner work with LastPass on the Samsung Galaxy S5?
  34. Can another browser extension or password manager capture data from LastPass?
  35. How is LastPass secure and how does it encrypt/decrypt my data safely?
  36. Why am I always asked to enter my master password on certain actions when I'm already logged in?
  37. I'm getting, "You must complete a security check before you are able to login to this site. Please do so, and then submit the form." alert, what is this?
  38. My Local Vault is not showing a secure connection icon in the URL bar. Is my connection secure?
  39. What personal information is used for the credit monitoring alerts? Is it safe?
  40. I have a charge on my credit card for your product, but I don't use it! How can I get my money back?
  41. I am getting this message: 'LastPass detected a login form that is insecure', why?
  42. How can I update my settings so that I don't get certain emails from LastPass?
  43. Why is LastPass issuing requests to my server?
  44. How do I share login state between browsers?
  45. LastPass says I cannot login from a country. How do unlock a country?
  46. How do you handle brute force / dictionary attacks for my LastPass account?
  47. LastPass stays logged in even when I close my browser or restart my computer! How do I prevent this?
  48. How can I inspect the network traffic that goes to LastPass?
  49. Is there a limit for character length of the Master Password?
  50. Should I be concerned about reports that my master password can be stolen?
  51. How can I kill all logins for other computers/devices/sessions that I may be logged into?
  52. Why am I seeing "LastPass doesn't recognize this device or you are at a new location. Please check your email to grant access to your new device or location." ?
  53. I get prompted to verify my location but everytime I click on the new link it says the link expired.
  54. Why am I prompted to log in via lastpass.com even if I am already logged in via LastPass extension on Chrome?
  55. How do I protect LastPass if I'm worried about malware compromising my machine?
  56. Someone may have sent me a phishing email. What email address does LastPass use?
  57. How many failed login attempts can occur before a lockout?
  58. My IP address is correct but LastPass appears to be showing the wrong location?
  59. Should I logout or use Master Password Reprompt to protect my account?
  60. I am in India and I am not getting an SMS message confirm my mobile number, where is my text message?
  61. Was LastPass at risk from the OpenSSL DROWN attack?
  62. How do I know which is the official LastPass Extension in the Chrome Webstore?
Still Having Trouble?
Look for answers in our vibrant customer-to-customer community help forums.
Forums
View your account information and view the status of previously submitted support tickets.
View Tickets
Submit a support ticket and we'll get back to you as soon as we can!
New Ticket

Please review these answers to your question:

Still Having Trouble?
Look for answers in our vibrant customer-to-customer community help forums.
Forums
View your account information and view the status of previously submitted support tickets.
View Tickets
Submit a support ticket and we'll get back to you as soon as we can!
New Ticket

Browse through our FAQs: