Go into your extension settings, and disable payment data capturing.
LastPass Icon > Account (footer of extension menu) > Extension settings. The relevant options will be in the notification section.
Some of these posts are straight up bashing a password manager like it was their ex-lovers who cheated on them. You can really tell when it's just a simple question and then someone jumps in sounding like they have some serious password-related trauma, screaming things like, "wHy hAvEn'T yOu HaTeD iT yEt LiKe tHe ReSt Of Us?!?!" It's kinda funny, honestly.
Shilling? That would imply that lastpass isn't a total pile of garbage and people should keep using it. I avoid posting my choice instead suggest people use google to read about the incredible incompetence of lastpass. The security community is unanimous that people shouldn't use lastpass.
>The security community is unanimous
"Security Community". Sure. But you'd be surprised to know that there are many users (both here in this subreddit and outsite) who will just change iteration, maybe change a few important passwords and keep using lastpass, and a lot more who just simply dont care and continue using it, even subscribing still.
So you're OK with the multiple lastpass hacks? And you're ok with their slow reporting of the hack to their users? The fact that they don't even encrypt the entire vault is acceptable in your world? The facts speak for themselves lastpass is not safe.
Maybe someday I'll change password managers. But I estimate it'll be \*\*at the very least\*\* three hours' work. Then there are the syncing issues. Then there are the risks of gotcha's with a different system while traveling (btw I log into LP via cellular network, not hotel wifi.)
There are other risks I spend lots of time on. Like storing water in case of a Cascadia Subduction Zone rupture. Lots of physical safety stuff. So Not LP, yet. (We are all different, in case others haven't noticed. One thing about me is that I respond to rational language rather than unoriginal expressions of absolute certainty delivered in a disdainful tone. That just makes me want to rebel or write stuff like this.)
I belong to the first group of people I mentioned, that's what I did and I'm ok with that. I totally get where you're coming from but the majority of users wont do anything because they don't have the time or the know-how to switch to a different password manager. Not everyone has the same risk tolerance like you, you can post here about your concerns but there's nothing you can do to make a dent on the majority of their opinion.
The reason this sub exists is because of their breaches. So hopefully you get an answer to your question, but I need to join the others and strongly recommend trusting your sensitive information to anyone but LastPass. They really should be your Last Choice for Passwords.
This is easy - delete lastpass - install a secure password manager. The recipe for disaster has already been made. Lastpass has been hacked in the worst way possible. You really need to google it and change your critical passwords - after deleting lasstpass.
Backwards. Don't delete LastPass first before you have exported the current passwords from LP and imported them into another password manager and then change the passwords in the new password manager as well as the TOTP/2FA. When al is confirmed working, then you can delete LastPass apps, extensions, account, in that order.
But it is unsafe. Research this sub to know more. Bitwarden or 1Password are just as easy and a lot safer. And make sure you delete all the data in the vault of LP and then delete your account.
I switched from LastPass, which I had been using for many years, after I learned about the hack.
I use Bitwarden. Just as easy. No pushing for credit card details, which I wouldn't put in anyway.
I have changed all my main logins in Bitwarden. It's a pain. But it is needed.The rest is changed when needing to log in. Just click that you forgot your password and you can make a new one.
LastPass isn't safe anymore. At all.
Seriously?! Lastpass has one job - keep your most private data safe. It has FAILED on numerous occasions to do at its one job. They don't even encrypt the entire vault.
There are multiple password managers out there that don't have the sloppy corporate culture of lastpass.
Staying with lastpass is kind dumb when there are so many other easier to use and more secure options out there.
.
Because you asked I will say I went with 1password. I'm not shilling and I get nothing from them. The process to move is pretty simple regardless of which password manager you choose. The most time consuming part has been changing all of my compromised passwords. AFAIK that's a manual process, but thanks to lastpass's lazy security and design one that must be done.
I've found 1password to work better than lastpass. I used lastpass for years and there's always a glitch when signing into certain sites. 1password doesn't have them and it still surprises me every time I log smoothly into those sites.
I came here for a troubleshoot to find a bloody mess. I remember the leak e-mail, but thought it wasn't that big a deal which makes sense since it came from LP themselves. Have today switched to 1P. I don't really keep up with password manager news and didn't realize how badly LP had fallen in favor with everybody. Hell, most people I know in real life don't use ANY password manager, so it's not something that's ever come up in conversation. Glad it was now than later.
Go into your extension settings, and disable payment data capturing. LastPass Icon > Account (footer of extension menu) > Extension settings. The relevant options will be in the notification section.
Thank you for answering instead of shilling
One of them blocked me after I recommended going outside because it isn't healthy to let a password manager company live rent free in their head.
Some of these posts are straight up bashing a password manager like it was their ex-lovers who cheated on them. You can really tell when it's just a simple question and then someone jumps in sounding like they have some serious password-related trauma, screaming things like, "wHy hAvEn'T yOu HaTeD iT yEt LiKe tHe ReSt Of Us?!?!" It's kinda funny, honestly.
Shilling? That would imply that lastpass isn't a total pile of garbage and people should keep using it. I avoid posting my choice instead suggest people use google to read about the incredible incompetence of lastpass. The security community is unanimous that people shouldn't use lastpass.
>The security community is unanimous "Security Community". Sure. But you'd be surprised to know that there are many users (both here in this subreddit and outsite) who will just change iteration, maybe change a few important passwords and keep using lastpass, and a lot more who just simply dont care and continue using it, even subscribing still.
So you're OK with the multiple lastpass hacks? And you're ok with their slow reporting of the hack to their users? The fact that they don't even encrypt the entire vault is acceptable in your world? The facts speak for themselves lastpass is not safe.
Maybe someday I'll change password managers. But I estimate it'll be \*\*at the very least\*\* three hours' work. Then there are the syncing issues. Then there are the risks of gotcha's with a different system while traveling (btw I log into LP via cellular network, not hotel wifi.) There are other risks I spend lots of time on. Like storing water in case of a Cascadia Subduction Zone rupture. Lots of physical safety stuff. So Not LP, yet. (We are all different, in case others haven't noticed. One thing about me is that I respond to rational language rather than unoriginal expressions of absolute certainty delivered in a disdainful tone. That just makes me want to rebel or write stuff like this.)
I belong to the first group of people I mentioned, that's what I did and I'm ok with that. I totally get where you're coming from but the majority of users wont do anything because they don't have the time or the know-how to switch to a different password manager. Not everyone has the same risk tolerance like you, you can post here about your concerns but there's nothing you can do to make a dent on the majority of their opinion.
Yet another company that relies on Reddit to provide free technical support (and shilling...)
The reason this sub exists is because of their breaches. So hopefully you get an answer to your question, but I need to join the others and strongly recommend trusting your sensitive information to anyone but LastPass. They really should be your Last Choice for Passwords.
What password manager do you recommend?
This is easy - delete lastpass - install a secure password manager. The recipe for disaster has already been made. Lastpass has been hacked in the worst way possible. You really need to google it and change your critical passwords - after deleting lasstpass.
Love how we're being down voted.
It amazes me that there could be lastass fanboys. They're even upvoting the one idiot giving bad advice on how to stay with lastass.
Such persons may also be shills of course.
Backwards. Don't delete LastPass first before you have exported the current passwords from LP and imported them into another password manager and then change the passwords in the new password manager as well as the TOTP/2FA. When al is confirmed working, then you can delete LastPass apps, extensions, account, in that order.
Oh please stop using LastPass. It is breached with a big clusterf*ck last half year
I mean this in the nicest but most efficient way. Have you just woken up from a coma?
Uninstall the extension.
But I like everything else the extension does
But it is unsafe. Research this sub to know more. Bitwarden or 1Password are just as easy and a lot safer. And make sure you delete all the data in the vault of LP and then delete your account. I switched from LastPass, which I had been using for many years, after I learned about the hack. I use Bitwarden. Just as easy. No pushing for credit card details, which I wouldn't put in anyway. I have changed all my main logins in Bitwarden. It's a pain. But it is needed.The rest is changed when needing to log in. Just click that you forgot your password and you can make a new one. LastPass isn't safe anymore. At all.
Seriously?! Lastpass has one job - keep your most private data safe. It has FAILED on numerous occasions to do at its one job. They don't even encrypt the entire vault. There are multiple password managers out there that don't have the sloppy corporate culture of lastpass. Staying with lastpass is kind dumb when there are so many other easier to use and more secure options out there. .
Good point. Do any have some sort of magical password-transfer from system-to-system, or do I have to do it all manually? Also, any suggestions?
Because you asked I will say I went with 1password. I'm not shilling and I get nothing from them. The process to move is pretty simple regardless of which password manager you choose. The most time consuming part has been changing all of my compromised passwords. AFAIK that's a manual process, but thanks to lastpass's lazy security and design one that must be done. I've found 1password to work better than lastpass. I used lastpass for years and there's always a glitch when signing into certain sites. 1password doesn't have them and it still surprises me every time I log smoothly into those sites.
I came here for a troubleshoot to find a bloody mess. I remember the leak e-mail, but thought it wasn't that big a deal which makes sense since it came from LP themselves. Have today switched to 1P. I don't really keep up with password manager news and didn't realize how badly LP had fallen in favor with everybody. Hell, most people I know in real life don't use ANY password manager, so it's not something that's ever come up in conversation. Glad it was now than later.