CNET Editors' review
The bottom line: Effective, secure, and easy to use, LastPass offers a broad base of password-management features for free that can be expanded when upgrading to the premium version. It's an essential add-on for modern Web browsing.
Passwords have gotten so complicated that even people with ferociously sharp memories can struggle to recall the eccentric combinations of letters, numbers, and symbols. There are passwords for personal e-mail, work e-mail, bank accounts, Twitter, and Facebook, and woe to anybody who uses the same one for those two malware magnets. On top of that, it's recommended that you regularly change your passwords so they don't get compromised. Passwords are a pain, but LastPass slices through the Gordian knot of password management with a deft and effective cross-platform browser add-on.
Installing LastPass is straightforward, except that you can choose between the universal installer or browser-specific add-ons. The easiest option is the universal installer, which will work with Internet Explorer, Firefox, and Chrome on Windows. Mac users will have to download individual add-ons for each browser.
LastPass takes the pain out of passwords
After creating a LastPass account and master password, which is used to access your password list, LastPass will ask to suck up all your passwords into its cloud-based, AES-256-encrypted servers. This key aspect of LastPass, the cloud-based storage, is then followed by an option to remove all your locally stored passwords. This prevents them from being compromised after you've begun using LastPass, although it also means that you will be tied to LastPass from that point. You can always export your passwords later, although after using the add-on for more than a year we've had no problems.
After installing, restart your browser and you'll see a gray or red box icon on your browser's toolbar. Red indicates you're logged in, while gray indicates you're not. Once logged in, you can visit LastPass' spreadsheet layout of your passwords with one click. This is called your "password vault," and while it's navigable, it could use some tweaking, too.
You can organize your passwords into folders and groups, you're told up front how long ago the password was last used, and there are quick links to Edit, Share, and Delete the password. A search field at the top will automatically search through URL and username. You cannot search by password.
A list of global actions such as settings, import and export, history, and manually adding sites lives on the left of the password list. To the right is a short list of options to be used when you select a password, currently limited to share, delete, and change group. At the top of the interface are tabbed options for managing your form-fill profiles, identities, shares, and applications.
Much of the add-on's heavy lifting happens in editing windows that open on top of your vault, but are not separate browser windows. This includes individual password editing and configuring, and changing LastPass' settings. The separate window is understandable for security purposes, but it detracts from the overall experience as an overlay.
Features and support:
LastPass offers a shocking number of features. The free version will be more than enough for most users, while upgrading to the premium version will get you LastPass for mobile devices and browsers, remove ads from your vault, provide priority e-mail and phone support, and give you multifactor authentication. This heightened level of security requires you to use a YubiKey or USB key in conjunction with your LastPass master password to gain access to your vault.
Basic and premium users alike will get LastPass' deep array of password-management tools. It will auto-detect username and password form fields. If it has the credentials for the page you're visiting, it will ask you to fill in the info. You can also set LastPass to automatically fill in credentials, or even automatically log in. When you visit a site that you're creating new credentials for, it will ask if you'd like it to create a password for you. Via the vault, you can change the default level of security for generated passwords. It will also detect when you've changed the password for a site that's already saved, and ask you if you'd like to change the saved version.
From within the Settings option in the vault, you can change your master password, configure the vault auto-log-off time, change the default security level to one of three presets or customize a fourth, and manage equivalent domains and URL rules for sites with more than one log-in.
While LastPass can be used solely from its Web site, and provides a virtual keyboard so you don't have to worry about a keylogger swiping your master password, some key features come only with the add-on. One of these is the on-the-fly creation of a one-time password, and there are others. The add-on menu shows you a list of recently used passwords, and allows you to copy credentials to your clipboard without revealing them first, fill forms, manage secure notes, customize hot keys, and change the LastPass icons.
It doesn't skimp on password tweaks, and that's a good thing.
Measuring add-on performance is notoriously difficult, although Internet Explorer 9 Beta did note that LastPass only slowed down the browser's boot time by 0.16 seconds. The default threshold for warning the user about add-on performance impact in IE9 Beta is 0.2 seconds or slower. Google Chrome dev 9.0.587.0 put LastPass' memory usage at 14MB of RAM, high for an add-on. Browsing with the add-on versus without it revealed no noticeable slow-downs on a daily use computer.
Password security and management have long been a deficient part of any browsing experience, and LastPass solves that problem while also making your passwords accessible anywhere. Cross-platform, cross-browser, and secure with a hefty range of options, this is the gold standard for password management.LastPass takes the pain out of passwords:
LastPass is the last password you will ever need. It allows you to: Create strong passwords, knowing you only have to remember one. LastPass has addons for: Internet Explorer, Firefox, Safari (for Mac), Google Chrome, and works with other browsers with Bookmarklets (e.g. Opera). LastPass uses Host Proof Hosting techniques to synchronize your passwords all while LastPass never has access to your sensitive data. LastPass offers a premium upgrade as well for mobile access on iPhone, BlackBerry, Windows Mobile, Google Android, Palm webOS, and Symbian phones.
What's new in this version: Version 3.1.0 improves performance and fixes bugs.
More Products to Consider
- Detect and quickly remove malicious threats to your computer.
- Login everywhere automatically, so you'll never need to remembe...
- Login everywhere in one click and easily share, preserve & secu...
- Protect your PC against the latest viruses and spyware.
- Protect your computer from viruses and malicious programs.
- Protect PC from viruses, Trojans, worms, buffer overflows, zero...
- Scan and remove the deepest malware that your antivirus/antispy...
- Provide secure, anonymous, and private browsing on Wi-Fi hotspo...
- Search your hard disk and Registry for threats to your security...
- Modify locked Microsoft PowerPoint 2007/2010/2013 presentations...
- Host a simple password management server compatible with KeePas...
- Store your credentials securely via sophisticated encryption.
- Encrypt and manage your valuable information.
- Detect and eliminate viruses, get free protection for home user...
- Uninstall unwanted and broken applications accurately.
- Secure desktops and lock computers on the network.
- Protect your PC against spyware and malware.
- Protect yourself from infected sites.
- Guard your Windows PC from malware and Internet based attacks.
- Mask your E-mail address, phone number, or credit card in Firef...
- Perform disk fragmentation, speed up your computer enhance hard...
- Protect yourself from infected sites.
- Download and exchange files safely, enjoy games and Web surfing...
- Password management you need and convenience you'll love!.
All versions:3.8 stars
out of 292 votes
Current version:2.5 stars
out of 2 votes
My rating:Write review
Results 1-2 of 2
"Huge conflict bet. Chrome and Firefox"
Version: LastPass Password Manager 3.1.0
Nice to have everything in one file. I'd recommend it but....
Log in on Chrome once and then login from Firefox and it practically kills you on speed. What comes up in the Firefox browser is chrome://lastpass/content/home2.xul. Simple you say, just log out in Chrome. But this doesn't work. Tech support request made over a week ago has got no response.
Great product. But hard to use and hasnt resolved browser conflicts. Couldn't recommend today
"Does what it's designed to do easily and pretty well."
Version: LastPass Password Manager 3.1.0
When I originally installed LastPass, it retrieved the URLs and passwords from previous password manager software. Generally performs its intended functions quite well. Interface is easy to use. Entering data manually is also easy, but in most cases, the program prompts me to save URLs and passwords via a drop-down notification box - which I'm sure most other managers do. Lots of options for inputting data and setting up the manager's performance.
Auto-login works sporadically - even though set up properly. A very few sites don't seem to like the auto-login feature; don't know why.
I originally chose this software because it boasted data retrieval from my previous program, and it did so in the majority of cases. The only thing I don't like about LastPass is that in a limited number of cases, it doesn't automatically log me in even though those sites are set up for that feature. It also occasionally wants to keep all of the old passwords I've subsequently changed. The software provides a list for such sites, but doesn't ID the change dates, so it's difficult to select the auto login data that is most current. For some reason, the new data doesn't overwrite the old. These are a little irritating but since LastPass is better than my previous program, it was an excellent step up. I'd probably test a different program to try to eliminate the minor glitches, but I can't find one that will retrieve my old data. It's a huge hassle re-inputting all the URLs and passwords. Overall, I find LastPass a very good password manager. If not for the irritating aspects, I'd rate it higher. However, if I could find a newer manager that could or would retrieve and record all my previous password data, I'd give it a try. For now, I'm very satisfied with LastPass - it's the third but best one I've used thus far.