Improve subdomain matching

[timint]

Hi. I have credentials stored for a list of subdomains using the Chrome extension:

a.example.com

b.example.com

c.example.com

...

 z.example.com

When acessing e.g.  b.example.com I get credentials matching a, c, d, e, f, g, h, .., b, ... z. Sometimes it's not in the list of suggestions but I have to search for it.

It's 2021 and surely someone can invent a smarter algorithm for matching a subdomain against the subdomain in the stored credential url? It shouldn't be rocket science.

I am proposing two things:

1) Keep track of when a credential is used somewhere and attempt to prioritize it next revisit.

2) Credentials matching subdomain urls should go before those who just match sibling subdomains.

Does that make sense?

[jonroc]

I agree 100% with this. Great feature request. 

[jongs]

This will save so much time when accessing the staging areas for our client websites

[Chrit]

As I understand, this is a feature of Enterprise, but not available on individual or family plans, which is ridiculous!

If you have a look at the demographic behind LastPass users, they're either technically minded or security conscious people.

So why this feature is not available for those people? It really blows my mind, and is quite frustrating for me personally.

I'd also like to point out the obvious that subdomains could very well be on different hosts.

Example being;
one.example.com > 144.211.86.119

two.example.com > 183.82.184.189

This means when logging in to example one, you have the possibility to expose your credentials for example two, to the wrong host.
This could have security implications.

LastPass, make this available for personal users too.

[garylonbrown]

Subdomains can be handled by opening your vault, clicking on "Account Settings", the click the "URL Rules" tab. Click the Add button and enter your subdomain without protocol. Accept the defaults and click "Add". Refresh the page you want to use it from and it will offer the subdomain credentials to you.

[Chrit]

garylonbrown, I could kiss you!

[Chrit]

But it would only be on the cheek, because these settings don't sync to the iOS App.

[timint]

@garylonbrown Thanks, although this is like a poor implementation from the 90s. It might actually solve the problem for some of those who don't have a bunch of different domain forrests.

[Vadorequest]

I'm on Enterprise and having the same issue, broken design. I wish it would be fixed for all LastPass users, too.

[Eax]

I was just on a call with support  with this topic , unfortunately only thing they suggested is to give better names to passwords entries . I don't know if it's safe to give ticket number here but i guess if someone from lastpass wants to hear me describing the issue with bad slavic accent over the phone it should come up on my email address . Please implement this, its annoying as f...

[monkeycat]

I concur.  This Host matching within a Site should be in this product by now.