LastPass - Revision history

Bananabot: Added archive URLs for 4 citation(s) using CRWCitationBot

2026-02-23T05:54:31Z

Added archive URLs for 4 citation(s) using CRWCitationBot

← Older revision		Revision as of 05:54, 23 February 2026
Line 10:		Line 10:
	'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.		'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.

	In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>{{Cite web\|url=https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7\|title=LastPass Completes Journey to Become an Independent Company with Enhanced Cybersecurity Focus and Executive Leadership Team \|date=2024-05-01\|work=LastPass Newsroom\|access-date=2025-11-02}}</ref>		In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>{{Cite web\|url=https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7\|title=LastPass Completes Journey to Become an Independent Company with Enhanced Cybersecurity Focus and Executive Leadership Team \|date=2024-05-01\|work=LastPass Newsroom\|access-date=2025-11-02 \|archive-url=http://web.archive.org/web/20260211035211/https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7 \|archive-date=11 Feb 2026}}</ref>

	==Consumer-impact summary==		==Consumer-impact summary==
Line 17:		Line 17:
	Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.		Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.

	LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>{{Cite web\|url=https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks\|title=Feds Link $150 Million CyberHeist to 2022 LastPass Hacks\|date=2025-03-07\|work=KrebsonSecurity\|access-date=2025-11-02}}</ref>		LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>{{Cite web\|url=https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks\|title=Feds Link $150 Million CyberHeist to 2022 LastPass Hacks\|date=2025-03-07\|work=KrebsonSecurity\|access-date=2025-11-02 \|archive-url=http://web.archive.org/web/20260221112713/https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/ \|archive-date=21 Feb 2026}}</ref>

	==Incidents==		==Incidents==
	===Free Tier Device Type Restrictions===		===Free Tier Device Type Restrictions===
	On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>{{Cite web\|title=Changes to LastPass free tier\|url=https://blog.lastpass.com/posts/changes-to-lastpass-free\|date=2021-02-16\|work=LastPass Blog\|access-date=2025-11-02}}</ref>		On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>{{Cite web\|title=Changes to LastPass free tier\|url=https://blog.lastpass.com/posts/changes-to-lastpass-free\|date=2021-02-16\|work=LastPass Blog\|access-date=2025-11-02 \|archive-url=http://web.archive.org/web/20260217211201/https://blog.lastpass.com/posts/changes-to-lastpass-free \|archive-date=17 Feb 2026}}</ref>

	===2022 Data Breach===		===2022 Data Breach===
	In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>{{Cite web\|url=https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security\|title=What did the lastpass breach reveal about password manager security?\|date=2025-06-13\|work=SecurityScorecard\|author=Learning Center\|access-date=2025-11-02}}</ref>		In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>{{Cite web\|url=https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security\|title=What did the lastpass breach reveal about password manager security?\|date=2025-06-13\|work=SecurityScorecard\|author=Learning Center\|access-date=2025-11-02 \|archive-url=http://web.archive.org/web/20260108033555/https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security/ \|archive-date=8 Jan 2026}}</ref>

SinexTitan: logo changed to SVG

2026-01-15T16:27:27Z

logo changed to SVG

← Older revision		Revision as of 16:27, 15 January 2026
Line 3:		Line 3:
	\|ArticleType=Service		\|ArticleType=Service
	\|Category=Password Managers, Browser extension, Software, Security		\|Category=Password Managers, Browser extension, Software, Security
	\|Logo=LastPass logo.~~png~~		\|Logo=LastPass logo.svg
	\|Website=https://www.lastpass.com/		\|Website=https://www.lastpass.com/
	\|Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password.		\|Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password.
	}}		}}

	'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.		'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.

Mr Pollo: expanding references

2025-11-03T01:00:22Z

expanding references

← Older revision		Revision as of 01:00, 3 November 2025
Line 9:		Line 9:
	'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.		'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.

	In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>{{Cite web\|url=https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7}}</ref>		In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>{{Cite web\|url=https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7\|title=LastPass Completes Journey to Become an Independent Company with Enhanced Cybersecurity Focus and Executive Leadership Team \|date=2024-05-01\|work=LastPass Newsroom\|access-date=2025-11-02}}</ref>

	==Consumer-impact summary==		==Consumer-impact summary==
Line 16:		Line 16:
	Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.		Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.

	LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>{{Cite web\|url=https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks\|title=Feds Link $150 Million CyberHeist to 2022 LastPass Hacks}}</ref>		LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>{{Cite web\|url=https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks\|title=Feds Link $150 Million CyberHeist to 2022 LastPass Hacks\|date=2025-03-07\|work=KrebsonSecurity\|access-date=2025-11-02}}</ref>

	==Incidents==		==Incidents==
	===Free Tier Device Type Restrictions===		===Free Tier Device Type Restrictions===
	On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>{{Cite web\|title=Changes to LastPass free tier\|url=https://blog.lastpass.com/posts/changes-to-lastpass-free}}</ref>		On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>{{Cite web\|title=Changes to LastPass free tier\|url=https://blog.lastpass.com/posts/changes-to-lastpass-free\|date=2021-02-16\|work=LastPass Blog\|access-date=2025-11-02}}</ref>

	===2022 Data Breach===		===2022 Data Breach===
	In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>{{Cite web\|url=https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security\|title=What did the lastpass breach reveal about password manager security?}}</ref>		In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>{{Cite web\|url=https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security\|title=What did the lastpass breach reveal about password manager security?\|date=2025-06-13\|work=SecurityScorecard\|author=Learning Center\|access-date=2025-11-02}}</ref>


	==See also==		==See also==
			{{Ph-C-SA}}

	==References==		==References==
			{{Reflist}}
	[[Category:{{PAGENAME}}]]		[[Category:{{PAGENAME}}]]

AnotherConsumerRightsPerson: Converted to cite web for refs, great start though!

2025-11-02T07:47:34Z

Converted to cite web for refs, great start though!

← Older revision		Revision as of 07:47, 2 November 2025
Line 1:		Line 1:
	{{ProductCargo		{{ProductCargo
	\|ReleaseYear=2008		\|ReleaseYear=2008
	~~\|InProduction=Yes~~
	\|ArticleType=Service		\|ArticleType=Service
	\|Category=Password Managers, Browser extension, Software, Security		\|Category=Password Managers, Browser extension, Software, Security
Line 10:		Line 9:
	'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.		'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.

	In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7</ref>		In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>{{Cite web\|url=https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7}}</ref>

	==Consumer-impact summary==		==Consumer-impact summary==
Line 17:		Line 16:
	Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.		Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.

	LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/</ref>		LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>{{Cite web\|url=https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks\|title=Feds Link $150 Million CyberHeist to 2022 LastPass Hacks}}</ref>

	==Incidents==		==Incidents==
	===Free Tier Device Type Restrictions===		===Free Tier Device Type Restrictions===
	On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>https://blog.lastpass.com/posts/changes-to-lastpass-free</ref>		On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>{{Cite web\|title=Changes to LastPass free tier\|url=https://blog.lastpass.com/posts/changes-to-lastpass-free}}</ref>

	===2022 Data Breach===		===2022 Data Breach===
	In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security/</ref>		In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>{{Cite web\|url=https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security\|title=What did the lastpass breach reveal about password manager security?}}</ref>

Box: Information about crypto theft

2025-11-02T04:16:30Z

Information about crypto theft

← Older revision		Revision as of 04:16, 2 November 2025
Line 17:		Line 17:
	Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.		Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.

	LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed.		LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed. Despite the most sensitive information being encrypted, the vault can be decrypted and was allegedly used in the theft of $35 million in cryptocurrency from 150 victims. In 2025 an even larger theft of $150 million was traced back to the data breach.<ref>https://krebsonsecurity.com/2025/03/feds-link-150m-cyberheist-to-2022-lastpass-hacks/</ref>

	==Incidents==		==Incidents==

Box: LastPass page

2025-11-02T04:10:14Z

LastPass page

← Older revision		Revision as of 04:10, 2 November 2025
Line 8:		Line 8:
	\|Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password.		\|Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password.
	}}		}}
	~~{{Ph~~-C-~~Int}}~~		'''LastPass''' is a password manager application that allows users to store passwords and notes securely using one master password. It was launched in 2008 and was one of the first widely adopted password managers.

			In 2015 LastPass was acquired by GoTo (formerly LogMeIn Inc) for $110 million. LastPass was later spun off into it's own company being acquired by private equity firms Francisco Partners and Elliott Management in 2024.<ref>https://www.lastpass.com/company/newsroom/b948ad48-3268-4c9e-8b45-0d6d02d0b4e7</ref>

	==Consumer-impact summary==		==Consumer-impact summary==
	~~{{Ph-C-CIS}}~~		LastPass, being a password manager, stores and transmits highly sensitive information (passwords and secure notes). LastPass relies on it's users trusting it to safely handle this information and have it be accessible.

			Use of a subscription service for more device types allows LastPass to restrict where users can view their passwords.

			LastPass has suffered a number of security incidents over the years with the most severe being the 2022 data breach which saw encrypted customer passwords and secret notes get exposed.

	==Incidents==		==Incidents==
	~~{{Ph-C-Inc}}~~		===Free Tier Device Type Restrictions===
	~~This is a list of all consumer-protection incidents related~~ to ~~this product~~. ~~Any incidents~~ not ~~mentioned here can~~ be ~~found in the [[~~:~~Category:{{PAGENAME}}\|{{PAGENAME}} category]]~~.		On February 16, 2021 LastPass changed it's free tier to restrict users to only one device type. After March 16, 2021 If a user was using LastPass on their Computer they would not be able to view their LastPass vault on mobile without paying for premium. These restrictions locked a large number of LastPass's userbase out of their passwords.<ref>https://blog.lastpass.com/posts/changes-to-lastpass-free</ref>

	===~~Example incident one (''date'')~~===		===2022 Data Breach===
	~~{{Main\|link~~ to the ~~main CR Wiki article}}~~		In August 2022 and November 2022 LastPass suffered a data breach involving a backup copy of a customer database and customer password vaults. The attackers used a compromised developer account to access source code which contained credentials to the aforementioned backup database. The stolen data included encrypted usernames, passwords and secure notes. It was also discovered that URLs, IP Addresses, Phone Numbers and some emails were unencrypted.<ref>https://securityscorecard.com/blog/what-did-the-lastpass-breach-reveal-about-password-manager-security/</ref>
	~~Short summary of the incident (could be the same as the summary preceding the article)~~.
	~~===Example incident two (''date'')===~~
	...


	==See also==		==See also==
	~~{{Ph-C-SA}}~~


	==References==		==References==
	~~{{reflist}}~~

	[[Category:{{PAGENAME}}]]		[[Category:{{PAGENAME}}]]

Box: Created page with "{{ProductCargo |ReleaseYear=2008 |InProduction=Yes |ArticleType=Service |Category=Password Managers, Browser extension, Software, Security |Logo=LastPass logo.png |Website=https://www.lastpass.com/ |Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password. }} {{Ph-C-Int}} ==Consumer-impact summary== {{Ph-C-CIS}} ==Incidents== {{Ph-C-Inc}} This is a list of all consumer-protection inc..."

2025-11-02T03:27:46Z

Created page with "{{ProductCargo |ReleaseYear=2008 |InProduction=Yes |ArticleType=Service |Category=Password Managers, Browser extension, Software, Security |Logo=LastPass logo.png |Website=https://www.lastpass.com/ |Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password. }} {{Ph-C-Int}} ==Consumer-impact summary== {{Ph-C-CIS}} ==Incidents== {{Ph-C-Inc}} This is a list of all consumer-protection inc..."

New page

{{ProductCargo
|ReleaseYear=2008
|InProduction=Yes
|ArticleType=Service
|Category=Password Managers, Browser extension, Software, Security
|Logo=LastPass logo.png
|Website=https://www.lastpass.com/
|Description=LastPass is a password manager application that allows users to store passwords and notes securely using one master password.
}}
{{Ph-C-Int}}

==Consumer-impact summary==
{{Ph-C-CIS}}

==Incidents==
{{Ph-C-Inc}}
This is a list of all consumer-protection incidents related to this product. Any incidents not mentioned here can be found in the [[:Category:{{PAGENAME}}|{{PAGENAME}} category]].

===Example incident one (''date'')===
{{Main|link to the main CR Wiki article}}
Short summary of the incident (could be the same as the summary preceding the article).
===Example incident two (''date'')===
...

==See also==
{{Ph-C-SA}}

==References==
{{reflist}}

[[Category:{{PAGENAME}}]]