Used by more than 2 million users, LastPass is an online password manager and Form Filler that makes your web browsing easier and more secure.
Videos:
Why Use LastPass? (Bob)
Why Use LastPass? (Digitwirl)
Getting Started with LastPass
LastPass is the last password you will ever need.
It makes web browsing:
EASIER : Never forget a password again and log into your sites with a single mouse click
SAFER: Protect yourself against phishing scams, online fraud, and malware
FREE: No catches or gimmicks. It's free to use on all your
What's New
Version 2.0.95: Release notes were unavailable when this listing was updated.
Requirements
PPC / Intel
Mac OS X 10.5.8 or later.
Safari 5.0 or later.
Related Links
Main download link has no extra features such as automatic logoff after idle and sharing of login state with other browsers, and is for Safari 5.0 or later.
If you are running Safari 3.0 or later, or wish to have the aforementioned additional features, download version 1.6.9.0 (32-bit).
After migrating from 1Password, I have to say thanks for this great password product. 1Password is always late supporting beta browsers and made BIG changes with the software to be listed on the Apple App Store.
1Password actually had to remove some long time features to get the listing so, I decided it was time to move on after 2 plus years of using 1Password. One feature I have been requesting for over 12 months is for 1Password to auto-fill the form but not submit it. @Fail even today on that request whereas LastPass has it now.
Where LastPass shines is it works with every version of every browser I have tested. Since we develop websites, we're always testing the new releases to see what might break. 1Password in my experience is late to the beta game and it's inconsistent across browsers.
Where LastPass needs to improve is with the browser and online interfaces. It needs more polish like 1Password. Once they get that licked, I think 1Password will need to continue to look over their shoulders.
As far as the security questions some have with LastPass being a cloud app? Please, you already store you passwords on way less websites so your no more likely to have your passwords compromised than with LastPass.
"...the idea of storing any of my data "in the cloud" is one this luddite finds incredibly naive".
++++++
I don't feel at all comfortable storing any of my privileged data "in the cloud" either.
However, I don't think that you can accurately characterize yourself as a Luddite since you ARE using computers and the internet.
A true Luddite would give computers and the internet a wide berth, no?
@Whitebuck - Well your statement is NOT really TRUE.
LastPass is as safe as your Master Password.
The LastPass database of passwords is encrypted on your Mac / PC BEFORE it is sent to LastPass. Not even LastPass can read your passwords. But of course, if LastPass gets hacked and someone steals this encrypted database, the hackers could get decrypt it and steal your passwords if you used a WEAK Master Password.
LastPass is constantly trying to improve its product from hackers.
But if you only want to log on to websites etc using Macs or PCs that you own and control (ie NOT using Macs / PCs in public libraries etc), then I would recommend KeePassX or 1Password. Both KeePassX and 1Password store your database of passwords in an encrypted form on your Mac or PC. (No need to worry about your database of passwords being stolen from a central website (unless your use Dropbox for syncing).
If you want to be able to log into websites using ANY Mac / PC (even the Macs/PCs in public places like public libraries), LastPass is a great solution but I prefer SuperGenPass. Nothing is EVER sent to a central website. SuperGenPass is easy to use and is free. See http://supergenpass.com/
A couple months ago LastPass reported suspected data exfiltration. Never heard what came of it but they acted very quickly. I used LastPass to store non critical passwords (e.g. everything except financial, billing, banking, investing, etc.) but have since moved to 1Password which stores everything locally.
LastPass's response to the potential data breach was exceptional though online data is never as safe as offline data.
1Password all the way. 5 star Password Manager and support. Fact! Only a fool would trust the "cloud" for any reason of use, period....... Stop consuming their profit driven propaganda! Wake up sheeple.
Why would you store your important passwords anywhere but your brain? Storing them anywhere else has at least some amount of risk.
I use LastPass (with Firefox) for forums passwords or dumb websites that require you to login to download updates, etc. I don't care what happens to those sites or that password.
LastPass was a pretty cool thing until a few days ago when it started to act very sketchy. It constantly was asking for my password saying that it encountered an error logging in.
I think my database may have gotten corrupted.
I will continue to use it on iPad/iPhone, but 1Password on my Macs!
Check also the application "LastPass Pocket" (http://helpdesk.lastpass.com/lastpass-pocket/)
It's an application that allow you to carry your LastPass data around with you. Pocket essentially provides backup capability and offline access for your Vault.
"LastPass plug-in" + "LastPass Pocket" = all that you need (no other applications, like 1Password, and it's more efficient).
The only thing that I hope for the future is a better interface with favicon for "LastPass Pocket" and the possibility to edit the database directly from the application.
I've come to like this software a lot after using it for a while. At first I was skeptical of storing my passwords online. But after listening to the Security Now podcast episode about Lastpass ( www.grc.com/securitynow #256 ) I now understand much better how it works. The passwords are stored in an encrypted file on Lastpass' servers, but your password isn't known to them. To authenticate you, they use a hash of your username and password combined, which can't be used by them or anyone breaking into their system to decrypt your passwords. They are very open about the way they handle security, and after listening to the aforementioned podcast I now very much trust their product.
Lastpass supports almost any browser and can import passwords from many different sources. For me, having my passwords available cross-browser, cross-system and cross-platform is why I like this product a lot. They have a solid implementation of security and there are many different options to customize it to your liking. They also support multifactor authentication. I only have to remember one password, and can use long convoluted and (most importantly) different passwords on websites, which I didn't always do in the past. Lastpass does a good job of remembering and managing them.
The free version is very complete, but I upgraded to premium anyway so I can use my yubikey to provide multifactor authentication and to protect against keyloggers. The premium version is a reasonable $12 for one year.
Wow, Thanks Limestone! This is one of the few factual and non-biased reviews of this product. You also note your sources which I really appreciate. I wish other users here would use your approach and professionalism in their future reviews. Thanks!
I am worried with the way this little app although really handy causes some worries. In this day and age where facebook and the like seem to get people's information so easily... I want to know why we have to create an account and why lastpass needs all our login info on various sites throughout the web for it work to be sent to them?
Some people are naive to the point they don't question these minor things, which really has major implications. As far as i am concerned lastpass doesn't really add anything new that safari autofill doesn't do already. I also find it very stupid that you need to create an account first just to uninstall it. I wanted to get rid of it soon as it asked to create accounts and will send information to their servers. This is the best way to keep tabs on people, especially since we don't know who these companies really are or work for.
I agree. Frankly I do not wish my passwords - i.e. privacy for my personal computer to be kept in the cloud and accessible to hackers. While I am almost sure the company would deny this, any on-line system is subject to hacker infiltration as even some of the most "secure" sites have been hacked.
Furthermore, judging from the website, the free version strikes me as being more of a limited feature 'demo' version as an introduction to a subscription based system if you wish to avail itself of all of its features.
As a self confessed "privacy freak", my first response was to completely agree with you. However, after following the suggestion of "Limestone" in the post of 23 Sept 2010 and reviewing the transcripts of computer guru Leo Laporte's show "Security Now"; I have a changed opinion.
Bear in mind that I am one who actually reads the privacy policy of websites before signing up and consequently don't sign up for sites that I otherwise might; and I am going to use this program. I never thought I would say this, but I can see now how it can be secure to store such data on a server.
I am not sophisticated enough to explain what I've just read, heck I barely understand it myself. Don't let security or privacy issues keep you from trying this program. I'd like to hear from others who read the transcript or download the podcast or audio.
In addition to the SIMBL based Safari add-on , they now do offer a Safari 5 extension.
It can be found in the Windows section of their download area, but it works fine on Safari 5 Mac!
I've been waiting patiently for Upek Biometrics to get it together and integrate a web password suite for Mac to use with their Biometric finger swipe dongle.
They were working with 1Password for a short time and I was THRILLED, but that was not to be and after a very short Beta release, and after Apple's release of 10.6, everything seemed to break down and that partnership dissolved.
The site says that they have "recently partnered" with LastPass, but I have absolutely no confidence with a product that so clearly disregards the Mac community by not even bothering to have a screen shot of a running Mac application under the Mac downloads both here and at other sites, but opts to throw up a Windows screen shot instead.
In my somewhat considerable experience these "ports" of Windows programs are almost always shoddy, thrown-together, and an afterthought, and most times run with the same sort of ease as you would expect a Windows program to run.
I can see by the lack of reviews and dismal download numbers that most everyone here seems to agree.
Actually, they have pretty decent Mac support. They support Safari on Mac via a SIMBL based add-on which admittedly does not have the most polished GUI, but once it is up and running it integrates quite well with Safari.
They also have a Safari 5 extension which I have found to work well. Although it is only listed in the Windows download section of the site...
So, while the app is not as polished as 1Password, it is free ( I have not encountered any ads from the Safari add-on/extension).
I really have to follow up on my comment with an endorsement of LastPass.
In fact I wish I could remove the previous all together.
Once I got it together I do think it may be as good if not better than 1Password.
Can't wait for the integration with my biometric device.
There are currently no troubleshooting comments. If you are experiencing a problem with this app, please post a comment.
EASIER : Never forget a password again and log into your sites with a single mouse click
SAFER: Protect yourself against phishing scams, online fraud, and malware
FREE: No catches or gimmicks. It's free to use on all your computers!
EVERYWHERE: Automatically synchronizes your data: access it from anywhere at anytime
SECURE: All of your data is encrytped locally on your PC - only you can unlock it
MULTIPLATFORM: Using a Mac, Windows, or Linux? LastPass works everywhere
MOBILE: Upgrade to premium for access to native mobile applictions for iPhone, Android, Blackberry, Windows, and Symbian
It allows you to:
Log into your favorite sites with a single click
Create strong passwords, knowing you only have to remember one.
Automatically fill out forms to save you time
Access and manage your data from multiple computers seamlessly
Supports all major browsers as well, so if you switch browsers you're always in sync, as well as when you switch computers
Share logins with friends and let others share logins with you
Use One Time Passwords, and a Screen Keyboard to help keep you safe while on the road.
Supports importing passwords from other password managers such as Roboform, Keepass, PasswordSafe, MyPasswordSafe, Sxipper, TurboPasswords, PassPack, Firefox and your browser's built in password manager
Exporting your data always available in plugin and the website.
Capture passwords that other password managers will not capture like those done in AJAX logins, and multi-step logins like Bank Of America, and frustrating sites like ING bank using the 'Save All Entered Data' feature.
Make moving to a new computer or using multiple computers much easier
Your sensitive data is encrypted locally with AES, then uploaded to allow syncing with other computers or browsers, and every browser is supported in the 'web access' mode at LastPass.com
-1
-5
Web-Jive reviewed on 22 Oct 2011
1Password actually had to remove some long time features to get the listing so, I decided it was time to move on after 2 plus years of using 1Password. One feature I have been requesting for over 12 months is for 1Password to auto-fill the form but not submit it. @Fail even today on that request whereas LastPass has it now.
Where LastPass shines is it works with every version of every browser I have tested. Since we develop websites, we're always testing the new releases to see what might break. 1Password in my experience is late to the beta game and it's inconsistent across browsers.
Where LastPass needs to improve is with the browser and online interfaces. It needs more polish like 1Password. Once they get that licked, I think 1Password will need to continue to look over their shoulders.
As far as the security questions some have with LastPass being a cloud app? Please, you already store you passwords on way less websites so your no more likely to have your passwords compromised than with LastPass.
+1
+32
I have a safety deposit box, multiple computers, not all of which are online and many offsite options to store them.
If we have not learned already how porous web security models can be, I don't know that we ever will.
In short, even the idea of storing any of my data "in the cloud" is one this luddite finds incredibly naive.
YMMV
+294
++++++
I don't feel at all comfortable storing any of my privileged data "in the cloud" either.
However, I don't think that you can accurately characterize yourself as a Luddite since you ARE using computers and the internet.
A true Luddite would give computers and the internet a wide berth, no?
-8
-319
Whitebuck reviewed on 09 Jun 2011
+130
LastPass is as safe as your Master Password.
The LastPass database of passwords is encrypted on your Mac / PC BEFORE it is sent to LastPass. Not even LastPass can read your passwords. But of course, if LastPass gets hacked and someone steals this encrypted database, the hackers could get decrypt it and steal your passwords if you used a WEAK Master Password.
LastPass is constantly trying to improve its product from hackers.
But if you only want to log on to websites etc using Macs or PCs that you own and control (ie NOT using Macs / PCs in public libraries etc), then I would recommend KeePassX or 1Password. Both KeePassX and 1Password store your database of passwords in an encrypted form on your Mac or PC. (No need to worry about your database of passwords being stolen from a central website (unless your use Dropbox for syncing).
If you want to be able to log into websites using ANY Mac / PC (even the Macs/PCs in public places like public libraries), LastPass is a great solution but I prefer SuperGenPass. Nothing is EVER sent to a central website. SuperGenPass is easy to use and is free. See http://supergenpass.com/
-2
+151
+1
+166
LastPass's response to the potential data breach was exceptional though online data is never as safe as offline data.
-7
-319
-3
+80
I use LastPass (with Firefox) for forums passwords or dumb websites that require you to login to download updates, etc. I don't care what happens to those sites or that password.
-1
+22
Jeff H. reviewed on 06 May 2011
I think my database may have gotten corrupted.
I will continue to use it on iPad/iPhone, but 1Password on my Macs!
+3
+16
Check also the application "LastPass Pocket" (http://helpdesk.lastpass.com/lastpass-pocket/)
It's an application that allow you to carry your LastPass data around with you. Pocket essentially provides backup capability and offline access for your Vault.
"LastPass plug-in" + "LastPass Pocket" = all that you need (no other applications, like 1Password, and it's more efficient).
The only thing that I hope for the future is a better interface with favicon for "LastPass Pocket" and the possibility to edit the database directly from the application.
+4
+5
Limestone reviewed on 29 Sep 2010
Lastpass supports almost any browser and can import passwords from many different sources. For me, having my passwords available cross-browser, cross-system and cross-platform is why I like this product a lot. They have a solid implementation of security and there are many different options to customize it to your liking. They also support multifactor authentication. I only have to remember one password, and can use long convoluted and (most importantly) different passwords on websites, which I didn't always do in the past. Lastpass does a good job of remembering and managing them.
The free version is very complete, but I upgraded to premium anyway so I can use my yubikey to provide multifactor authentication and to protect against keyloggers. The premium version is a reasonable $12 for one year.
+2
+180
+1
+80
+1
-33
Some people are naive to the point they don't question these minor things, which really has major implications. As far as i am concerned lastpass doesn't really add anything new that safari autofill doesn't do already. I also find it very stupid that you need to create an account first just to uninstall it. I wanted to get rid of it soon as it asked to create accounts and will send information to their servers. This is the best way to keep tabs on people, especially since we don't know who these companies really are or work for.
-1
+149
Furthermore, judging from the website, the free version strikes me as being more of a limited feature 'demo' version as an introduction to a subscription based system if you wish to avail itself of all of its features.
+4
+34
Bear in mind that I am one who actually reads the privacy policy of websites before signing up and consequently don't sign up for sites that I otherwise might; and I am going to use this program. I never thought I would say this, but I can see now how it can be secure to store such data on a server.
I am not sophisticated enough to explain what I've just read, heck I barely understand it myself. Don't let security or privacy issues keep you from trying this program. I'd like to hear from others who read the transcript or download the podcast or audio.
+2
-40
It can be found in the Windows section of their download area, but it works fine on Safari 5 Mac!
-2
+22
They were working with 1Password for a short time and I was THRILLED, but that was not to be and after a very short Beta release, and after Apple's release of 10.6, everything seemed to break down and that partnership dissolved.
The site says that they have "recently partnered" with LastPass, but I have absolutely no confidence with a product that so clearly disregards the Mac community by not even bothering to have a screen shot of a running Mac application under the Mac downloads both here and at other sites, but opts to throw up a Windows screen shot instead.
In my somewhat considerable experience these "ports" of Windows programs are almost always shoddy, thrown-together, and an afterthought, and most times run with the same sort of ease as you would expect a Windows program to run.
I can see by the lack of reviews and dismal download numbers that most everyone here seems to agree.
+1
-40
They also have a Safari 5 extension which I have found to work well. Although it is only listed in the Windows download section of the site...
So, while the app is not as polished as 1Password, it is free ( I have not encountered any ads from the Safari add-on/extension).
+1
+22
In fact I wish I could remove the previous all together.
Once I got it together I do think it may be as good if not better than 1Password.
Can't wait for the integration with my biometric device.
-1
Majesty30 rated on 28 May 2011