LastPass

Profile narrative

LastPass provides a password management service that allows users to store, generate, and autofill login credentials across devices and platforms. The core offering is an encrypted vault that holds usernames, passwords, secure notes, and payment information. It includes browser extensions, mobile apps, and a web interface that synchronize data through the cloud. The service targets individual consumers, families, and business customers seeking centralized credential control. By offering multi‑factor authentication and password‑generation tools, LastPass aims to reduce reliance on weak or reused passwords.

LastPass distinguishes itself through a Zero Knowledge architecture, meaning that only the user possesses the master password capable of decrypting stored data. All vault entries are protected with AES‑256 encryption, and encryption keys are derived locally from the master password. The company emphasizes that even if its servers are compromised, attackers cannot access plaintext credentials without the user’s master secret. These design choices are intended to mitigate the impact of breaches, as seen in several incidents where encrypted vault data remained unreadable. Additionally, LastPass provides security‑dashboard features that alert users to reused or weak passwords and monitor for credential leaks.

Headquartered in the United States of America, LastPass operates as a standalone provider of identity‑and‑access‑management solutions. Over the years the company has experienced multiple security incidents that have exposed support case data, source code, and encrypted backups, prompting ongoing investments in detection and response. Despite these events, the firm continues to market its service as a tool for improving personal and organizational password hygiene. The combination of cryptographic safeguards, user‑controlled master secrets, and broad platform support forms the basis of its market positioning. LastPass remains active in the password‑manager sector, adapting its offerings in response to evolving threat landscapes.

Incidents

5 incidents linked to this organisation.