Security Feature
Security dashboard
Your cybersecurity command center for assessing password security & monitoring accounts for data breaches.
Free trial for all plans. No credit card required.
The LastPass security dashboard is your command center for your digital security. In one view you can see your weak and reused passwords as well as any alerts on compromised accounts that need immediate action. Within the dashboard you can:
- Update weak and reused passwords
- Assess and improve your overall security score
- Monitor your email addresses for involvement in data breaches and get alerts when your sensitive information is compromised
One of the first things you notice when you visit the security dashboard is your security score, which is an aggregate score that factors in the overall strength of all your passwords, and whether you’re using two-factor authentication to protect your LastPass account. Next to your security score you will see a list of your weak and reused passwords. Updating these passwords will improve your score and keep you protected online. Be sure to use the LastPass password generator to create strong, unique passwords for every account.
A company security score and unified dashboard give IT admins clear visibility into password hygiene, MFA usage, and risky behaviors. With real‑time insights and trends, teams can pinpoint vulnerabilities, track improvements, and prioritize fixes. Paired with LastPass’s automated password management and policy controls, these tools streamline oversight, reduce errors, boost user compliance, and strengthen the organization’s overall security posture.
How can I take action on my digital security?
Stop password reuse
Reusing passwords is one of the riskiest things you can do. Update all weak and reused passwords with strong, unique ones you create with the LastPass password generator.
Enable dark web monitoring
Keep your accounts safe by enabling dark web monitoring in the Security Dashboard. Once it’s on, you can relax knowing that LastPass is monitoring your account security for you. If an account is at risk, you will receive an alert in your email and in-product.
If you receive an alert
Immediately change your email and linked account passwords using the LastPass password generator to create strong, unique ones. Then place a fraud alert and credit freeze with all three credit bureaus and stay vigilant for suspicious activity or messages.
Trusted by millions, recognized by experts
Millions
Customers secure their passwords with LastPass
Chrome and App Store rating
Based on 79,300+ reviews
100,000+
Businesses choose LastPass
“I like that LastPass is easy to use and intuitive. It integrates well with all websites and allows me to keep secure encryption for all my personal and work-related accounts. It allows me to organize folders, share with others, and only memorizing one master password for all of those while keeping encryption secure is a relief.”
Kenny Kolijn
Independant business coach
“I use LastPass both corporately and personally. It allows me to securely store and share passwords with my family and co-workers in separate environments and happily generates random secure passwords for me, which prevents me from re-using the same one.”
Erik Eckert
System administrator, MPE Engineering Ltd.
“If you deal with other people's information, as my company does, LastPass is a must. We use it to organize sensitive client credentials, which has never failed us. Its level of security offers us flexibility if we have a vendor or team member that needs access but don't want to share the actual password.”
Sarah Perry
Senior Marketing Director, Small businessLearn more about dark web monitoring
Dark web scans
Learn more about what it means to "scan" the dark web.
Dark web alerts
Learn what steps to take if you receive a dark web alert.
Fighting identity theft
LastPass is one tool in your arsenal to protecting your identity.
Frequently asked questions
Your security score in LastPass is a summary of your overall digital security calculated based on password strength, multifactor authentication (MFA) usage, and reports from dark web monitoring.
LastPass uses the industry-standard zxcvbn library to calculate each password's strength. As a result, your individual passwords' strength and security score for all your passwords in your vault may vary. Individual password strengths can be 0-25-50-75-100, while the security score can be between 0-100.
No, LastPass doesn’t have access to your passwords or email addresses. LastPass operates on a zero-knowledge security model, where all encryption and decryption occur locally on your device, not on our servers. Your sensitive vault data is only transferred to LastPass once encrypted and never travels over the internet unencrypted.
The same is true for our partnership with Enzoic – our partner that monitors the internet and dark web for data leaks. LastPass provides Enzoic only a hashed version of your email addresses.
If you are a Premium, Families, Teams, or Business user, you already have access to your security dashboard. Just click the “Security Dashboard” link in your password vault and follow the instructions to improve your security score. It’s that easy. You can also enable dark web monitoring from the dashboard.
If you are a LastPass admin for a Business account, you can manage the “Control security score calculation” policy and its settings for your end users. You can see and evaluate your overall company security score in your adoption dashboard.
All LastPass plans include the security dashboard, which you can reach via your vault or the LastPass extension. Dark web monitoring comes with all plans, too, but it needs to be manually enabled from your security dashboard to use it.
