Check Your Usernames Against Security Breaches

To find out if your Site username was revealed in a publicly-known data breach, do the following:

  1. Log in to LastPass and access your Vault by doing either of the following:
    • Go to and log in with your username and Master Password.
    • In your web browser toolbar, click the LastPass icon LastPass then click Open My Vault.
  2. Click Security Challenge in the left navigation.

Note: The Security Challenge will only check against your personal entries, not any shared logins or shared folders (including family shared folders). However, the Security Challenge does check sites stored in shared folders to see if they were impacted by the Heartbleed Bug and alert you to whether your passwords need to be updated for those sites.

  1. Click Show My Score.

  1. If prompted, enter your Master Password and then click Continue.

  1. Another Web page opens. At the bottom, click Check now.

  1. A pop-up window then indicates if any of the usernames in your Vault were involved in a known security breach since the last time the test was run. Click Show My Score to close the window and return to the Security Challenge, where you can change site passwords for compromised accounts. If there is a site listed that you no longer use, we recommend that you close that account to avoid being compromised in the future.


Use the Security Challenge

Restrict LastPass Access to Specific Countries

Set Up and Manage LastPass Credit Monitoring

Protect Your Data with Your Master Password