Is anyone else annoyed at constantly having to get out your cell phone, unlock it and then find the Authenticator app open that and then enter the numbers BY HAND into the form field on the computer you are suing. What are we barbarians!?!?   I started using lastpass because I am lazy and now tithe proliferation of MFA I feel like I am back in the stone age, hunting and gathering.  It's too much work! Can something be done with NFC or bluetooth so that your computer can grab the Authtenicator code off your device while it is still lin your pocket?     I am a paying customer and I demand more ... or rather less  -- work-ishness (?) I want more fun and less time digging around in my pockets (for my cell phone).   Forgive my English, I learned it from books I found behind adult toystore. Peace be upon you all.  ... View more

When opening Chrome (or probably any other browser that supports the LastPass extension) and a user is logged in, the extension is active (red icon with the three dots).  When clicking on the extension icon, there is the menu item "Open My Vault" for accessing the complete vault, without the need to bypass any other barrier.  I consider this a potential security risk. Assuming that a user may leave her computer unattended for a short time, a person passing by could access with a single click the complete vault. Hence my request: add an option to require entering the master password again when opening the vault.    Thanks.          ... View more

I am receiving periodically an alert for an account compromised on the Dark Web, but I already fixed the issue.   I would still like to have the account monitored for future events but not to be reminded anymore of the one i already fixed so i don't want to stop monitoring it.   An Acknowledged Event flag would really help ... View more

I would like to add a feature request to add Snipe-IT to LastPass' SSO / SAML app catalog. I have successfully managed to create a custom SSO app and I would like to share my settings with you to make it easier to integrate the hosted SaaS app version.   Here's what worked for me:   1. Select your app App Name: Snipe-IT 3. Service Provider ACS: https://my-company-name-here.snipe-it.io/saml/acs Entity ID: https://my-company-name-here.snipe-it.io Nickname: Snipe-IT 4. Advanced Setup Identifier: EMail SAML signature method: ✅ SHA256 5. Custom Attributes ✅Sign Assertion ✅Sign Response Logo: See https://twitter.com/snipeitapp/photo ... View more

Your Security Score needs to be recalculated if you employ two-factor authentication against a Web Site   Not changing a password is mitigated and risk reduced if you employ 2-factor Authentication and if this a soft token using OTP like google authenticator and your score further improved if you use a hard Token such as yubikey.   This would help promote people into using 2FA and nudge them in the right direction buy improving there score      ... View more

Hi, for ISO 27001 I need to get an overview of the users that have particular access to shared-folders. I would like to get this in a matrix. Users on one axis, Shared Folders on the other, and type of access where the cross. ... View more

Often I am using an external monitor with my laptop in the background, with the browser open, when the last pass window opens up.  This causes me to stop what I'm doing, open the laptop, close the window, and resume. ... View more

e.g. i have an entry for my ea/origin account with my e-mail and password and when i quick search for that entry i type in "origin" as its name is saved as "ea" it wont find it so adding an alias with the name "origin" would be helpful thank you ... View more

When clicking CTRL + Name (or CTRL + Fill icon) open the URL in a new tab. Explanation: Many times it happens that the domain is entered without logging in (and the page does not include the login button). In such a case, in order to log in, you have to manually open a new tab, search the name (again) and log in. The suggested feature will save the fuss. ... View more

Whenever I use the iPad Lastpass search bar (in portrait) the left hand list of results window is always obscured (results truncated) such that it is difficult to differentiate search results, particularly when they start with the same name. It is natural to try and expand the result window column to the right so more of the filtered result text can be seen.... but alas this seems not possible. This seems like an obvious UI improvement, since the current iPad search often gives some frustrating trying to see more of which result to select when they are named similar. ... View more

There are users in my organization who have no personal sites saved with their enterprise account.  They have access to one or more shared folders and access websites from those shared folders.  Any new site they may save gets saved in a shared folder so they, and others (supervisor, for example), can access that site. The result is that they are given a very weak security score which is not an accurate reflection of their master password security, their MFA configuration, or the strength of the passwords in the shared folder.   The number of personal sites saved should not be a strong determination of a user's security score. ... View more

The ability to create logins for many popular web sites just by tapping their logos on the Touch Bar on the MacBook — no browser needed. ... View more

When logging into a work website, lastpass hits "reset password" instead of "Login" every time. Maybe it is because reset password is next in line. Idk. It would be handy to have a way to either choose your login button or ignore login buttons. Or if it is an enter keystroke, give the option to skip it? I'd rather not turn off auto login on all my vaulted sites. Hopefully this makes sense to someone.  ... View more

Would like to suggest giving MSP's the ability to setup AD Connector by using admin accounts from the MSP root account rather than having to create separate email accounts for each of our customers sites. ... View more

I would like to see a very simple messaging function between users, both point-to-point and hierarchically (for admin→user group broadcasts). The intention is to allow in-app-related messages for user-to-user sharing and and admin awareness & control of subordinate user groups.   At the most simple level, the messages would be simple text, plain fonts, without graphics or sound. The messaging function would provide users with options akin to the most simple of email services:  read, mark unread, delete, reply, reply all (for admins only), pin to top/unpin. Auto delete after 30 days, no archive. Admin gets to send messages to all subordinate users, and pin-to-top their messages for all users, admin gets optional read receipt tick-mark (or other low-bandwidth usage notification) from users. PC-to-mobile linked accounts get an in-app notification that matches user's mobile app notification preferences. Admins get to access user accounts for shared access files only. There is a "Messages" menu item on the left side (below Security Dashboard) and at the top (next to Shared with Me).    Maybe for a more advanced service, in addition to the above, users get a one-deep folder system with Admin always at the top (if applicable).  Admin gets more options like mobile app notifications of users not reading messages, user problems with logins with a optional threshold (like three incorrect login attempts, etc.), a 2-deep folder tree system, and alerts of possible user account intrusions. Users and Admins can send screenshots of error messages. Admins get an option to paste a warning or reminder splash screen that appears at subordinate user login that can be a one-time viewed post, time-limited post (appears for each login for 5 business days, etc.), or login-limited post (5x logins, etc.). ... View more

As a lastpass admin I'd like to be able to automate the creation, deletion, and managing (update settings, add/remove users/groups, etc) SSO Apps in the Admin Console -> APPLICATIONS -> SSO apps area of the admin console So that I can ease the burden of managing many SSO apps through the LastPass admin console and also decrease the number of accidents/problems due to human error from manually entering the information for these app settings screens ... View more

I know this feature was remove a couple of years ago for security, but it was a very useful feature and I have been missing it.  As a developer, many time I need to close my browser and reopen immediately.  I always have to log back in to lastpass.  I don't want to leave last pass logged in all the time, I generally DO want to be logged out when I close my browsers, I just need it to stay logged in if the closure was brief.  To me, this feels much more secure, knowing that if I close my browser and walk away, I am logged out,  while still having the convenience of staying logged in during my work session. If there was a way to bring this feature back in a secure way, it was very useful. ... View more

I have enabled "reprompt master password" when accessing a site password. Still the chrome extension allows me to share a password with a friend with full password access without first prompting me for my master password.    Could you please add a setting to reprompt for the master password before sharing anything at all? ... View more

Currently dark web monitoring seems to just look for emails.  Some logins are not emails and there could be compromised passwords revealed on the dark web.  Even google chrome will check compromised passwords in their database.  There should be a way to either manually or automatically check your passwords (especially the LastPass-generated ones) on dark web.  No matter how strong the password, sites will be compromised through back doors and sometimes the exploits aren't known except for these unique passwords circulating.  Can be done securely by checking hash of secure passwords against hashes of exposed password. ... View more