HELP FILE

Manage Never URLs

For certain sites, you may not want LastPass to store your credentials, generate a password, supply a form fill item, automatically log you on, or do something else. To prevent LastPass from taking specific actions for a specific website, you can add a Never URL.

Note: For LastPass Enterprise users, additional Global Never and Only URLs can be set by an admin, and will be labeled as "Enterprise Domain" in your list. Domains set by an admin cannot be edited or removed. Additionally, if you try to add a Site manually for a URL or domain that is already set as a Global Never URL, you will encounter a message indicating a policy prohibits it.

About types of Never URLs

There are two types of Never URLs: Domain and URL. The domain type of Never URLs can be used to disable LastPass for all pages under a domain, while the URL type of Never URLs can be used to disable LastPass only on selected pages of a domain. Both types of Never URLs can have wildcard(s) at the front and/or at the end.

Note: A domain type Never URL without a subdomain will match every path on the domain and every subdomain as well.

Add a Never URL

  1. Log in to LastPass and access your Vault by doing either of the following:
    • Go to https://lastpass.com/?ac=1 and log in with your username and Master Password.
    • In your web browser toolbar, click the LastPass icon LastPass then click Open My Vault.
  2. Select Account Settings in the left navigation.
  3. Click the Never URLs tab, then click Add.
  4. Choose from the following Type of data you wish to prevent LastPass from supplying:
    • Never Add Site – Prevents prompting the notification to add a Site.
    • Never Generate Password – Prevents prompting the notification to generate a password.
    • Never Fill Forms – Prevents prompting the notification to use a Form Fill.
    • Never AutoLogin* – Prevents the Site from automatically logging in.
    • Never AutoFill Application* – Prevents the automatic filling in the Site (the Site must be also listed under "Never AutoLogin").
    • Never Show Context Icons – Prevent the field icons from appearing.
    • Never do Anything – Disables LastPass on a Site entirely.
  5. Enter the URL of your desired site, which you can enter using the following example formats:
Never URL Type Example Matches Example Non-Matches Action
example.com Domain example.com/, examplecom/login, www.example.com/, www.example.com/login otherdomain.com/, example.net/ Match every path and every subdomain
example.com/ URL example.com/ www.example.com/, example.com/login Match only the page "/" of a domain
example.com/login URL www.example.com/login www.example.com, example.com/ Match only the page "/login" of a domain
www.example.com/ URL www.example.com/ example.com/, www.example.com/login Match only the page "/" of a subdomain
example.com/* URL example.com/, example.com/login www.example.com/ Match every page of a domain (but not its subdomains)
www.example.com/* URL www.example.com/, www.example.com/login example.com/ Match every page of a subdomain
*.example.com/login URL example.com/login, www.example.com/login example.com, www.example.com/index.php Match the page "/login" of every subdomain
*.example.com/* URL example.com/, www.example.com, example.com/login, www.example.com/login otherdomain.com/ Match every page and every subdomain (equivalent to example.com)
  1. Once you have entered your desired URL(s) for each type, click Add.
  2. When finished, you can close the Account Settings window.

Note:  If the site is launched from the LastPass Vault or from the LastPass web browser extension, it will ignore the "Never AutoLogin" (as a Never URL) and "Disable Autofill" (site Preference) options.

Delete a Never URL

Note: "Enterprise" domains set by a LastPass Enterprise admin cannot be edited or removed.

  1. To delete a "Never URL" that you have created, click on the Delete icon Remove.
  2. When prompted, click OK to confirm.

Related

Set Up Automatic Logins

Require a Master Password Re-prompt

Disable Autofill for Sites