Your security and privacy are our top priority – that’s why we’ve taken every step possible to ensure that your data is safely stored and synced in your LastPass account.

Locally encrypted sensitive data

All encryption/decryption occurs locally on the user’s device, not on our servers. This means that your sensitive data does not travel over the Internet and never touches our servers, only the encrypted data does.

Government-level encryption

We use the same encryption algorithm that the U.S. Government uses for top-secret data. Your encrypted data is meaningless to us and to everyone else without the decryption key (your emails and Master Password combinations).

Only your users know the key to decrypt their data

Your encryption keys are created from your users’ email addresses and Master Passwords. The Master Passwords are never sent to LastPass – only a one-way hash of your password when authenticating – which means that the components that make up your keys remain local to your users. LastPass also offers configurable corporate policies that let you add more layers of protection.

Control your policies

We know that one size does not fit all when balancing corporate security and ease of use. That’s why we allow you to define your preferences by providing a full range of configurable corporate policies. We strongly encourage you to review the policy options prior to rolling out LastPass across your organization.

Generate unique, strong passwords

No more using the same password for all sites. No more writing down passwords on little pieces of paper. No more emailing yourself when you forget your password. With the LastPass password generator users can create strong passwords for each site and automatically save them to their individual vault. With LastPass, your data will be safer online than ever before without the hassle of remembering unique passwords.

No more using your browser’s insecure password manager

Any malicious application can easily retrieve saved passwords from your users’ browsers. With LastPass, you’re protecting  your users from these attacks!

Learn more about protecting yourself from phishing scams