Improve subdomain matching

cancel
Showing results for 
Search instead for 
Did you mean: 

Improve subdomain matching

Improve subdomain matching

Hi. I have credentials stored for a list of subdomains using the Chrome extension:
 
a.example.com
b.example.com
c.example.com
...
 z.example.com
 
When acessing e.g.  b.example.com I get credentials matching a, c, d, e, f, g, h, .., b, ... z. Sometimes it's not in the list of suggestions but I have to search for it.
 
It's 2021 and surely someone can invent a smarter algorithm for matching a subdomain against the subdomain in the stored credential url? It shouldn't be rocket science.
 
I am proposing two things:
1) Keep track of when a credential is used somewhere and attempt to prioritize it next revisit.
2) Credentials matching subdomain urls should go before those who just match sibling subdomains.
 
Does that make sense?
12 Comments
jonroc
Active Contributor

I agree 100% with this. Great feature request. 

jongs
New Member

This will save so much time when accessing the staging areas for our client websites

Chrit
Regular Visitor

As I understand, this is a feature of Enterprise, but not available on individual or family plans, which is ridiculous!

 

If you have a look at the demographic behind LastPass users, they're either technically minded or security conscious people.

So why this feature is not available for those people? It really blows my mind, and is quite frustrating for me personally.

 

I'd also like to point out the obvious that subdomains could very well be on different hosts.

 

Example being;
one.example.com > 144.211.86.119

two.example.com > 183.82.184.189

This means when logging in to example one, you have the possibility to expose your credentials for example two, to the wrong host.
This could have security implications.

LastPass, make this available for personal users too.

 

garylonbrown
New Member

Subdomains can be handled by opening your vault, clicking on "Account Settings", the click the "URL Rules" tab. Click the Add button and enter your subdomain without protocol. Accept the defaults and click "Add". Refresh the page you want to use it from and it will offer the subdomain credentials to you.

Chrit
Regular Visitor

garylonbrown, I could kiss you!

Chrit
Regular Visitor

But it would only be on the cheek, because these settings don't sync to the iOS App.

timint
Active Contributor

@garylonbrown Thanks, although this is like a poor implementation from the 90s. It might actually solve the problem for some of those who don't have a bunch of different domain forrests.

Vadorequest
New Member

I'm on Enterprise and having the same issue, broken design. I wish it would be fixed for all LastPass users, too.

Eax
Regular Visitor

I was just on a call with support  with this topic , unfortunately only thing they suggested is to give better names to passwords entries . I don't know if it's safe to give ticket number here but i guess if someone from lastpass wants to hear me describing the issue with bad slavic accent over the phone it should come up on my email address . Please implement this, its annoying as f...

monkeycat
Active Contributor

I concur.  This Host matching within a Site should be in this product by now.