Add the option to exclude sites from the Security Challenge

cancel
Showing results for 
Search instead for 
Did you mean: 

Add the option to exclude sites from the Security Challenge

Add the option to exclude sites from the Security Challenge

I would find it really helpful if there were a per-entry setting for a site that enabled it to be excluded from the Security Dashboard checks. Several of the financial institutions I use have a simple PIN or short numeric password for the first-stage login and then a more complex password for the second stage. As far as I can see LastPass doesn't have the ability to handle two-step logins and therefore only sees the fist password, which it reports as weak. If I change such passwords they will still be considered week, so there is really no benefit in them being included in the dashboard score.

33 Comments
msteltman
Active Contributor

Another reason to do this is to be able to exclude passwords for local (LAN) devices, that are by no means accessible from the internet. It is not necessary to include these in the challenge

pixelriffic
New Member

Howdy folks,

 

I have used lastpass for several years.  In that time, I have accumulated hundreds of entries.  Some of which are saved logins for other clients.  I have many entries that are for sites that no longer exist, or logins that are no longer in use.  I would really love to see an option to remove a login entry from within the security dashboard.  Or short of that, a link to the main login entry.

 

Thank you for your time!

dwward
New Member

I came here to suggest the same change.  I just clicked Security Dashboard and looked at the at-risk password, and I have several accounts that are typos, out-dated accounts, duplicates or localhost passwords that I use for software development.  However, I'm presented only with a "Change Password" link with doesn't make sense for those alternate scenarios.  A simple "Delete" or link to the "Edit Entry" popup would greatly assist a user who needs to update their passwords -- if you consider the alternative, it is to: Memorize the name of the offending website and username, navigate away from this page to the Password page, make the edits or deletes, then return to this page.   I have nearly 80 websites throwing a risk flag and this website as it is provides a tedious and demotivating user experience.

Former Member
Not applicable

I too (like dwward) use LastPass to also store local development passwords for convenience only and not security. These local development passwords pose no risk at all and I would like to exclude them from the scrore.

glenn59
Active Contributor

I have also posted this request some time ago. What could be safer than being able to delete no longer used passwords conveniently?

coachstevens
New Member

YES,  same thing, amen!!

glenn59
Active Contributor

Is their a way to add this to a request list?

Or better yet, is there some one from Logmein that has noticed this?

rblaakmeer
Active Contributor

Yes, please add an "Audit" button to each item. Clicking the button would require you to enter a comment and remove it from the security dashboard. It should be possible to review the list of audited items. 

macdaddy69
New Member

I echo the sentiment of the OP and others. We should be able to tell LP to ignore a site on a case by case basis, or ignore an entire folder of sites.  Anyone that works in IT has thousands of saved credentials.  The vast majority of them for local, off-net devices.  Not to mention folder after folder of internal customer devices THAT WE DO NOT DICTATE SECURITY POLICY ON.  We should able able to exclude them from the Security Assessment. 

 

Considering that power users are the bulk of the people that use LastPass, the majority of which work in IT, not having this feature makes the Security Assessment utterly useless to us.  This is not hard to fix.

r0bdiabl0
Visitor

Please add a delete entry button on the Security Dashboard as the original poster has mentioned.