"ShowPassword" extension. Security concern!!!

[tan89]

Shared login's users can see the shared password, even you have checked the hide password when you shared the logins. Shared login's users can get an extension called "ShowPassword" on their browser, which will display the password for the sites that you shared with users.

I have submitted the ticket about this issue, and hopefully LastPass will come up with a good solution.

[jpenny84]

LastPass has zero control over a password after it is released into the browser. This is already disclosed in the documentation. Savvy users, third party utilities, and even other password managers can reveal or capture the password.

https://support.logmeininc.com/lastpass ... 0007#About

Best practice is to be aware of this and share accordingly.

[FlyingHawk]

What jpenny84 said.

If you want someone to use your password, they must have access to it one way or another. If they have access, there will be a way for them to see it explicitly, one way or another. LastPass doesn't control your and the sharee's browser/OS/hardware etc.

The feature is only ever meant to make seeing password more difficult for the sharee. It's fundamentally impossible to completely prevent the sharee from seeing it.