Hi. I have credentials stored for a list of subdomains using the Chrome extension:   a.example.com b.example.com c.example.com ...  z.example.com   When acessing e.g.  b.example.com I get credentials matching a, c, d, e, f, g, h, .., b, ... z. Sometimes it's not in the list of suggestions but I have to search for it.   It's 2021 and surely someone can invent a smarter algorithm for matching a subdomain against the subdomain in the stored credential url? It shouldn't be rocket science.   I am proposing two things: 1) Keep track of when a credential is used somewhere and attempt to prioritize it next revisit. 2) Credentials matching subdomain urls should go before those who just match sibling subdomains.   Does that make sense? ... View more

Particularly in business usage we sometimes need to manage dozens, if not hundreds, of different credentials, each of which with its own expiry timeframes (some 15 days, some 30, 45, 60, 90 days, etc).  This makes it extremely difficult to manage credentials expiration, so it would be a great addition to LastPass a field, when adding or editing a credential, where we could set the expiry timeframe for each password. This should then trigger an alert (perhaps 7 days, then 3 days, then 1 day before expiring) to remind the user to renew said password before it expires. For business environment (but also for personal use) it would greatly help the users to keep their multiple credentials valid and active. ... View more

Add feature to track password age and generate a reminder when set age expires. ... View more

Many organizations are moving to more inclusive language and away from loaded terminology in their coding. But each day when I open LastPass, I am confronted with the idea of a "Master" password. This term comes from the outdated, loaded and racist tech language of "master/slave."  I encouraged you to look at this resource: REN-ISAC inclusive language in IT  I am both a personal user and part of a business user group at work. Many of the tech organizations I work with have moved to more inclusive language, as have the real estate agents in my community.  (It's now called a Primary Bedroom in real estate listings). I'd love to know where on your roadmap it is to change this label.  ... View more

We would like to be able to require that users have a certain number of password iterations set. Currently, admins on a Business Plan cannot require users to have a minimum number of password iterations configured in their LastPass client. One method could be by configuring a policy in the admin console.   After the August 2022 LastPass breach, one of the LastPass recommendations was for users to set their password iterations to at least 100100. However, we have found users with significantly lower numbers set.   ... View more

There is no way to view the six-digit codes for MFA-enabled accounts via the iOS LastPass App. The only way is through the LastPass Computer application.   This is a request to add the ability to view the MFA code saved on login credentials to be visible in the mobile app.   EG: I save a Google account and Secret Key on the LastPass application on the computer, and I can view the 6 Digit MFA code that is generated.   When I log into my LastPass vault on the Mobile iOS App, I would like to see the 6 Digit MFA code there also since it is the same vault and data that I am accessing via the computer.  ... View more

When logging into a site in Chrome, it is possible to fill the username and password fields by right-clicking and selecting from the context menu. This is very convenient because it keeps my mouse pointer right near where the UI designer intended it, and makes it easy to click the next button.   However, if the site uses TOTP as a second factor, there's no option to paste the TOTP token from the context menu. Instead, I have to move my mouse all the way up to the top right of the window, select it from the extension's menu, and return to paste it. That's a lot of extra movement and steps that could be avoided by simply including it in the context menu.   Request 1: please add a "Fill TOTP" and/or "Copy TOTP" option to the context menu in Chrome.   I use the LastPass TOTP functionality and an authenticator app interchangeably. For shared corporate accounts, the secret is in LastPass so it can be shard with other users. For personal accounts, it is in my authenticator app on my phone. It is sometimes hard to remember which is where.   At the moment LastPass always shows the "Copy TOTP" option even when no secret is configured. Worse, clicking on it with no secret does nothing. If I have a token in my clipboard from the last login and then click it again for the next, I still have the wrong token. It then takes a moment to realise what's happened and that I actually need to go to my phone.   The problem could readily be solved if the "Copy TOTP" option (and "Fill TOTP" suggestion above) only displayed when there was a TOTP token to copy. Or alternatively, greyed out or had a similar visual indicator it wasn't configured...   Request 2: please make the Copy TOTP option only show when there's a TOTP secret configured. ... View more

The latest LastPass update removed the search function in the login popup field. Please return it. Example: When logging into Gmail I would click the browser extension icon in the user or password window. There used to be a search field there. It was super handy to search from there to get the needed credential.  It was super useful as I manage many accounts for some platforms (Gmail, Constant Contact, Mailchimp, etc.) Not being able to search for a credential anymore make my job much more difficult. Sometimes I have to scroll through 30 or so passwords when I used to be able to search for the credential name or username.  Related to this is the credential names used to be alphabetized, they are no longer. At least I could scroll to where I knew the name was in the past. After this last update, it is no longer.  These two things have made things considerably more difficult to use the service.   ... View more

Hi Team, We've got a lot of our client websites hosted on subdomains. *.mydomain.co.uk  URL matching doesn't work properly while fetching passwords for these sites. As I believe it's treated on the basis of the domain. I also found that there's a setting available for us to set URL Rules. But manually adding 100s of our website is bit time-consuming. As there are many more additions in future as well. Is there any way we can do bulk import for the URL Rules or adding wildcard matching like *.mydomain.co.uk  within URL Rules? ... View more

On a windows desktop you can switch from passwords to notes to other times simply by selecting the type of items you want to view.  However, when doing this I'm often left with are large number of empty folders since, for example, I only have notes in 4 folds but I have 20 folders with passwords.  It would really cleanup the display if we had the option to not display empty folders making it faster to find what I'm looking for. ... View more

Hi,   The problem:   1 Some websites have poor password parameters: limited to 10 characters and no symbols, yet lastpass alerts these as weak under the security dashboard. 2 Some websites have 2 factor type authentication, with a username alone or with a pin on first page and password or memorable word on second. Yet again Lastpass reports these as weak or missing if it is the username on is first page. This is typical with banking websites. 3 There are legitimate reasons to have duplicate passwords: If you have a web based email client and all other emails are popped into that email client. You have a password for the original email company, but when you want to access the email through the web based third party email client (e.g. gmail), you need to input the same username and password settings. If there is a security breach on the former and is changed, it is a pain to re input the new password on gmail each time. So it is easier to copy the password and save it a s a separate profile for the gmail client for that particular email being popped in., especially as the passwords are complicated.   Suggestions:   1 Have a link function under the security dashboard that helps to link 2 passwords that are genuinely linked together like the example above. These linked passwords should be able to be accessed under a separate drop down menu in the top right corner of the security dashboard (as currently exists for "missing", "reused" and "weak"). Also, a change to one password should automatically bring up a notification to change the linked password. This saves copying and pasting into the linked password manually.    2 There should be an "ignore" button to allow certain passwords to be ignored so they do not re-appear in the security dashboard and not counted in the score (this alleviates the examples problem 2 highlights). Again have a drop down menu that groups the ignored passwords together so you can keep them under review when the websites update their security settings.   I hope these can be taken seriously and can be introduced very soon. I have been a customer for around 7 years now so this would be very helpful.   Thank you.   Milan ... View more

the "generate password" feature is easily accessible outside of the vault: either from a form-fill button on any website with a password field, or from the chrome extension dropdown menu.   however, "generate password" is only available from within the  vault in the "Advanced Options" section, which is very unintuitive.   I suggest that the "generate password" feature be made accessible from two more places within the vault: 1. in the "Edit Password" modal where you can modify a website's existing password, you should be able to generate new passwords (this is actually a very common use case, as websites often periodically require you to update your password). 2. in the "+" icon menu in the vault, usually just for opening the "create new password" modal. it makes a lot of sense from a UI perspective that the "+" icon should make it possible for me to create a new password for easy copy-pasting, without having to fill out a form or saving the generated password to LastPass ... View more

It would be very helpful to have the one-time password entry in site entries. Currently it is only usable for LastPass Business users. So you got use the OTP without any authenticator app. Here you can the example from the support page: https://support.logmeininc.com/lastpass/help/how-do-i-create-a-time-based-one-time-passcode-totp-for-site-entries-as-a-lastpass-or-identity-user ... View more

I see several questions on this topic in the forum, but no resolution. I'm using Enterprise for work and just signed up for Families only to realize that shared Family folders are no longer visible when logged into my enterprise account, even though I have my personal account linked. This is extremely annoying, especially on the mobile app. Please help us access all our passwords in one place! ... View more

I would find it really helpful if there were a per-entry setting for a site that enabled it to be excluded from the Security Dashboard checks. Several of the financial institutions I use have a simple PIN or short numeric password for the first-stage login and then a more complex password for the second stage. As far as I can see LastPass doesn't have the ability to handle two-step logins and therefore only sees the fist password, which it reports as weak. If I change such passwords they will still be considered week, so there is really no benefit in them being included in the dashboard score. ... View more

So, I have MFA and OTP across LastPass and mobile apps an it's confusing where they might be when logging in. It It would be handy if Lastpass didn't show the option to Copy TOTP if No TOPT exists. Only display the field(s) that exist in the entry.     ... View more

Situation: a user manages passwords or certificates or any other object. The managed password will expire on a specific date in the future   Request 1: please add the possibility to store the expiry date of the object    Request 2: add a feature to search for expired passwords   Request 3: add a dashboard to show managed passwords that will expire soon add a notification email so that the user gets informed about passwords that will expire soon   ... View more

Hello, Brand new to the community and to LastPass. I really like it so far, but was really shocked that there is no way to change the icons for site passwords in the vault. I know this isn't necessarily a "new" suggestion considering a lot of people have been asking for this feature for many years now, but I have to agree that staring at a bunch of padlocks while my eyes visually scan the name within each box is really annoying. I get that the idea here is that websites should be providing this icon, but many of them still don't, and asking us to contact each website's owner to encourage them to add the icon is, quite frankly, not a very user-friendly solution. There are many ways that this could be solved. Here are some suggestions: Give users the ability to upload our own png, jpg, etc. for each entry. Allow users to pull from a set of a few hundred stock icons provided from LastPass. Allow users to the background color of each box. It should go without saying that going with this option also means ensuring that the color palette is colorblind-friendly. Please consider adding this feature. I really like LastPass, but this is clearly something that we, the community, want and something that I honestly feel should've been considered a mandatory feature for a product like this. Thank you for your consideration. ... View more