Manage Never URLs
For certain sites, you may not want LastPass to store your credentials, generate a password, supply a form fill item, automatically log you on, or do something else. To prevent LastPass from taking specific actions for a specific website, you can add a Never URL.
Note: For LastPass Enterprise users, additional Global Never and Only URLs can be set by an admin, and will be labeled as "Enterprise Domain" in your list. Domains set by an admin cannot be edited or removed. Additionally, if you try to add a Site manually for a URL or domain that is already set as a Global Never URL, you will encounter a message indicating a policy prohibits it.
About types of Never URLs
There are two types of Never URLs: Domain and URL. The domain type of Never URLs can be used to disable LastPass for all pages under a domain, while the URL type of Never URLs can be used to disable LastPass only on selected pages of a domain. Both types of Never URLs can have wildcard(s) at the front and/or at the end.
Note: A domain type Never URL without a subdomain will match every path on the domain and every subdomain as well.
- Log in to LastPass and access your Vault by doing either of the following:
- Go to https://lastpass.com/?ac=1 and log in with your username and Master Password.
- In your web browser toolbar, click the LastPass icon then click Open My Vault.
- Select Account Settings in the left navigation.
- Click the Never URLs tab, then click Add.
- Choose from the following Type of data you wish to prevent LastPass from supplying:
- Never Add Site – Prevents prompting the notification to add a Site.
- Never Generate Password – Prevents prompting the notification to generate a password.
- Never Fill Forms – Prevents prompting the notification to use a Form Fill.
- Never AutoLogin* – Prevents the Site from automatically logging in.
- Never AutoFill Application* – Prevents the automatic filling in the Site (the Site must be also listed under "Never AutoLogin").
- Never Show Context Icons – Prevent the field icons from appearing.
- Never do Anything – Disables LastPass on a Site entirely.
- Enter the URL of your desired site, which you can enter using the following example formats:
|Never URL||Type||Example Matches||Example Non-Matches||Action|
|example.com||Domain||example.com/, examplecom/login, www.example.com/, www.example.com/login||otherdomain.com/, example.net/||Match every path and every subdomain|
|example.com/||URL||example.com/||www.example.com/, example.com/login||Match only the page "/" of a domain|
|example.com/login||URL||www.example.com/login||www.example.com, example.com/||Match only the page "/login" of a domain|
|www.example.com/||URL||www.example.com/||example.com/, www.example.com/login||Match only the page "/" of a subdomain|
|example.com/*||URL||example.com/, example.com/login||www.example.com/||Match every page of a domain (but not its subdomains)|
|www.example.com/*||URL||www.example.com/, www.example.com/login||example.com/||Match every page of a subdomain|
|*.example.com/login||URL||example.com/login, www.example.com/login||example.com, www.example.com/index.php||Match the page "/login" of every subdomain|
|*.example.com/*||URL||example.com/, www.example.com, example.com/login, www.example.com/login||otherdomain.com/||Match every page and every subdomain (equivalent to example.com)|
- Once you have entered your desired URL(s) for each type, click Add.
- When finished, you can close the Account Settings window.
Note: If the site is launched from the LastPass Vault or from the LastPass web browser extension, it will ignore the "Never AutoLogin" (as a Never URL) and "Disable Autofill" (site Preference) options.
Note: "Enterprise" domains set by a LastPass Enterprise admin cannot be edited or removed.
- To delete a "Never URL" that you have created, click on the Delete icon .
- When prompted, click OK to confirm.