I received this email message from

[do-not-reply_[email protected]](mailto:[email protected])

------------------------------

Message: One of the sites in your LastPass vault has had its password changed.

Time of Change 2026-07-18 06:40:58

LocationCanary Wharf, TWH E14, UNITED KINGDOM

From IP Address xxx.xx.xxx.xxx

[Not sure why I'm blanking out a crook's IP, but I'm 81 and better safe than sorry !!]

Q: Does that mean:

- Someone has entered my LastPass vault

- Randomly selected a site

- Altered the password for that site

- Triggered an email from LP support

Thanks

Bom dia.

Estou tentando há um tempo recuperar minha senha mestre. Antes quando eu esquecia, conseguia recuperar. Agora eles pedem o e-mail, eles enviam um código, no entanto não abre a janela para digitar o código. Isso utilizando o Chrome. Quando eu utilizei o Firefox, ele abria a tela pra colocar esse código, porém dizia que eu ti há que usar um navegador que eu já tenha usado para recuperar a conta.

Why are the confirmation emails from lastpass not arriving? I have the correct master password but because I installed a new browser due to crash it wants me to verify through email even though it sent a code to the phone and I have the correct master password AND changed the master password. The emails do not arrive. As soon as I get in I shall backup all my passwords and delete last password. Not worth the agro

Anyone know how to directly contact support? My login is mucked up and I can't correct with lack of support options.

A password policy does more than set password requirements; it creates a framework for securely managing credentials across your organization.

When no policy exists, convenience often wins over security. Employees may reuse passwords, share accounts, store credentials insecurely, or use unauthorized applications without oversight.

The consequences are real: passwords remain one of the most exploited attack vectors, and password-related support requests can account for a significant share of helpdesk workloads and operational costs.

Below we cover 8 password policy best practices:

1. Require a minimum password length of 14–16 characters
2. Eliminate mandatory periodic password changes unless there's evidence of compromise
3. Ban common and context-specific passwords
4. Require multi-factor authentication (MFA)
5. Apply different policy requirements to different user groups based on risk
6. Lock accounts after repeated failed login attempts
7. Monitor for compromised credentials continuously
8. Allow long passwords, permit all character types, and allow paste functionality

See our recent Blog post for more information on this topic.

I’ve been trying to log back into LastPass without success. I had not accessed it in a while and forgot my password. I tried to reset the master password multiple times. It verified me by FaceID and I enter the new password and then when I go to save it I get this error screen. I’ve tried this 20 times. I then went on my computer and tried to contact support and also got error messages there when I tried to send my request. Any help?

I’m trying to connect to FiveM from my brother’s PC. I have signed out of all of his accounts and programs (Steam, Rockstar, Cfx.re) and signed into my own accounts. I even reinstalled Windows, installed everything from scratch, and logged into all of my own accounts again. However, every time I join the server, it still loads my brother’s character instead of mine. Do you have any idea what could still be causing this?

I got an email from LastPass [email protected] and it had a suspicious link and a call to action. I reported it to LastPass and they confirmed that it was not from them.

I use Lastpass as my prime password manager. I use it on my Macbook, iPhone and iPad. I love it. I recently started to have an issue on just my iPad. When I open the LastPass app on my iPad and I want to add a password, I click (+) then Add Item but nothing happens. It works perfectly on my iPhone and Macbook still.

I have tried:

- clearing the cache and local data on Chrome and Safari
- removing the extension in Safari
- uninstalling and reinstalling LastPass
- Clearing the local cache in LastPass
- refreshing the Valut in LastPass

I'm stuck! Has anyone else experienced this issue? Does anyone have any suggestions on how to fix this? I'm completely stuck!!!

I attempted to make an online purchase today and manually copied card number, expiration date, and CVV from LastPass Payment Card Details to the merchant site. Purchase was declined. Repeated the process with a different card with the same result.

Then I noticed that the Expiration Date in Last Pass was off by one month for both of the cards I attempted to use. Further inspection revealed that seven credit cards and ATM cards in LastPass had expiration dates one month different than actual expiration month.

I checked a backup that I had made on July 1 and the backup data agree with the physical cards. So, somehow within the last 2 weeks the expiration date in LastPass became offset by one month.

Also, if I change the expiration date in Payment Card Details and save the changes, the "Expires" date in the List view shows as one month later than the date in the Details view.

Here's a screen shot showing the discrepancy between the Payment Card Details and the List view:

Am I missing something? I have a few passwords it tells me are reused, but not where they're reused.

I've also added some to the list of equivalent sites, but some of them still show up in the security checkup.

I reset my password cause it wouldn’t let me log in! But my new password won’t even let me in! So now I’m completely logged out what’s going on!?!

Most of my logins had autofill disabled, but recently (last few months), something has changed and accounts that I know had autofill disabled have been reset to autofill.
Has anyone else noticed this change?
This is quite concerning to me that my setttings in Lastpass could be reset to something like this.

Morning all, I closed LastPass families account a month ago and migrated everything to another platform. No more login etc…

Then the other day I get a renewal email, which I can no longer even login to the account.

The email seems legit, but I’ve cancelled my account and closed it completely… but to contact technical support I’ve got to log in, which I can’t because it’s closed…

Help??

I’m seeing some really odd behavior with Secure Notes in the LastPass iPhone app and I’m wondering if this is expected or a bug.

All of my Secure Notes are set up the same way:

• Just a title (e.g. “Shopping,” “Health,” “Travel”)
• One long free-form note containing usernames, passwords, PINs, security questions, etc.
• No custom fields, attachments, or templates—just plain text.

Two things are happening:

1. Some notes show a preview under the title in the vault list, while others don’t. The preview isn’t the beginning of the note. It’s a seemingly random username, password, or other line from somewhere in the middle of the note.
2. Some notes have the blue overlapping-squares icon. When I tap it, LastPass says “Copied to clipboard,” but it copies that same random username or password from the note—not the first line, not the whole note, just one seemingly arbitrary value. It consistently copies the same value for that specific note every time.

The notes are just plain text, so I don’t understand how LastPass is deciding what to preview or copy.

Has anyone else seen this? Is LastPass parsing Secure Notes somehow, or is this an iOS bug? I’d love to understand why some notes show previews, why others don’t, and how the app decides what the Quick Copy button copies.

Seems to work on most things except that browser

I have had LastPass for a long time, but decided to switch to a new platform because I wanted extra layers of security in case of breaches.

I paid for LastPass for the year about 1 month ago. I also already paid for the year on the new platform and switched over, but I still have LastPass as a backup for now to make sure everything transferred smoothly.

Once I feel comfortable that everything moved over correctly and there are no glitches, should I delete LastPass completely, or would you keep it sitting on the back burner?

I think leaving it active may be counterproductive from a security standpoint. When I exported the file, some of the notes did not transfer correctly, but they looked okay in the new platform after import.

Also, does LastPass usually refund annual plans if you cancel this soon after renewal, or should I expect to just eat the cost and move on?

Is there anything specific I should check or verify before closing out LastPass completely?

Free personal account

For whatever reason, password doesn't work as of today. Checked, rechecked then checked again. I'm entering it correctly...

Clicked forgot password, got a code in my email. Entered code into site and it fails saying it doesn't recognize the browser. At some point, I cleared cookies, cache and site data during troubleshooting process.

I've tried different browsers, same result. What is the point of sending a code to my email to reset my password if it needs to see evidence in the browser that I've logged in with it before?? What if my PC becomes unusable and I have to login from a new PC?

As of now, I'm locked out from too many attempts. How long does that remain in effect?

I did not generate any backup codes during account setup. That's on me.

Is there any solution to this?

Edit: Already read this guide and its info is not helpful to my current situation.

https://blog.lastpass.com/posts/forgot-your-password-your-guide-to-lastpass-account-recovery

I received an email titled “Threat intel from the front lines — live, July 15” from [email protected]. It looks like a cool webinar, but the email address domain <m.lastpass.com> gave me pause.

Klue Security Incident & LastPass