How do I use the LastPass app for Android?
LastPass for Android is an application that will allow you to carry your LastPass data around with you. As always, this data can only be unlocked using your email address and password.
If you have permitted offline access when you enabled Multifactor Authentication, the LastPass mobile app can store a locally cached version of your Vault so that it can be accessed when you do not have internet connectivity.
There are a few different ways that you can use LastPass on your Android device:
- Use the LastPass app for Android
- Use the LastPass Android Browser within the mobile app
- Use LastPass to fill Android apps and sites in Chrome
For more information about supported devices and versions, please see System Requirements for Users.
Install LastPass for Android
Log in to the app
- Open the LastPass app for Android on your device.
- Log in with your username and Master Password, then select Log In.
If prompted, complete steps for multifactor authentication (if it is enabled on your account).
Set up and use biometric authentication for mobile account recovery
For supported Android devices, you can set up and use biometric authetnication using facial recognition or fingerprint identification as a means of mobile account recovery if you ever forget your Master Password. Don't worry, if you choose to skip this step, you can set it up later in the LastPass Password Manager app's Security settings. Learn more about Android account recovery.
You must log in to the LastPass app for Android with your username and Master Password before you can set up account recovery using biometric authentication.
Use the LastPass Vault
Once you have logged in to the app, you are taken to your Vault, displaying all of your sites. You can swipe left from the right edge of the screen to access your Secure Notes and Form Fills, or select the Vault Options icon in the upper left navigation to access your Sites, Secure Notes, Form Fill Profiles, Settings, as well as the following options:
- Security Challenge to run an evaluation on all of your existing passwords.
- Browser to access the in-app LastPass web browser.
- Generate Password to create a strong, new password.
- Manage Shared Folders to view, create, or delete existing Shared Folders (for Families, Teams, and Business users only). Learn more.
- Emergency Access to set up a trusted person to access your account in an emergency situation.
- Log Out to log out of your LastPass account.
You can also add a new site, secure note, or form fill item by selecting the Add icon in the lower right navigation on any of the Vault screens.
Select your desired site to bring up your site action menu with the following options:
- Launch your site in the in-app LastPass Browser or your default browser.
- View the site entry and credentials.
- Edit the site fields and/or Form Fields. Optionally, you can also change the following settings:
- Show Password to view the text of the existing password for the site.
- Copy Username to your Android clipboard.
- Copy Password to your Android clipboard.
- Copy URL to your Android clipboard.
- Add Copy Notifications to display a "Copy Username" and "Copy Password" notification to be used when you navigate to that specific app or website.
- Share Item to share the site entry via email.
- Add Shortcut to Home to add a shortcut app icon on your tablet Home screen that links to your site.
- Delete to delete the site entry.
Select your desired Secure Note to view it, then select the Edit icon in the upper right navigation to edit your Secure Note fields, including the following options:
- Require Password Reprompt
- Select Attachments in the bottom toolbar and add an image or voice recording as follows:
- Select the Photo icon to add an image from your Gallery.
- Select the Camera icon to add an image by taking a photo.
- Select the Record icon to add a voice recording.
- Additionally, you can select the Options icon in the upper right navigation to Share or Delete.
Form Fill profiles
Select your desired Form Fill to view and edit the fields and if desired, Require Password Reprompt. Additionally, select the Options icon for the Delete option.
Your LastPass Account
You can view your account email address and account type. If desired, select Account Settings to change your Master Password.
- Lock LastPass Automatically: This option and its sub options will allow you to set when LastPass will lock itself if sent to the background or if the screen is turned off. Accessing LastPass again will require either your Master Password or a PIN code. The sub options allow you to set a PIN code and modify the Reprompt Timer.
- Lock when app is idle: This option allows you to selected your desired timeout period.
- Lock when screen is turned off: This option enables LastPass to lock itself if the screen turns off.
- Use fingerprint to unlock: Allows the user to unlock LastPass using fingerprint identification on supported devices (initial setup instructions will vary by device). This is required in order to use mobile account recovery for Android.
- Check session when app is activated: When the LastPass app is brought to the foreground (after you’ve been using other apps), this option forces the app check to see if the session has been terminated on the server; if so, LastPass will log off. This forces you to log in again, and forces an update from the server. This is a very useful feature for users who often terminate their sessions via the server, or are concerned about losing their mobile device.
- Skip reprompt after log in: This feature allows a user to log in to the LastPass Application, and perform an action that requires Master Password Reprompt without re-entering their Master Password. *NOTE* This feature only works if the user does not have his/her Master Password set to be remembered, and the maximum amount of time from log in to performing an action that would require the Master Password to be re-entered is currently 20 minutes.
- Log out when app is idle: Setting a time limit for this feature will ensure that your LastPass app logs off after X minutes of LastPass being logged in, but in the background of your device. This is another good security feature to use when concerned about the loss or theft of a mobile device
- Allow screenshots of this app: Allows you to choose whether screenshots can be taken while within the LastPass app.
- Allow offline access: This allows you to log into your locally cached data if you do not have access to an Internet connection (requires to have logged into the server at least once, and you have not disabled offline in your Multifactor Authentication options).
- Autofill login credentials: Allows you to fill and save passwords (recommended),
- Show autofill dialog: Allows notification of the autofill dialog to appear in the system notification bar at the top of your Android device’s screen.
- App settings: Allows you to choose which apps you want to show fill window and/or fill helper for and add the Matching site URL.
- Autofill notification settings: Allows you to allowlist which apps and web browsers display the autofill notification.
- Automatically hide autofill notification: Allows you to set whether the autofill notification will appear for all web browsers or all apps.
- Allow web search from Vault: When the Vault is visible, this option allows text entered into the Search/URL bar to be passed to Google as a search string, but only after the search has been submitted (the user has select Enter). Security-conscious users may want to disable this feature to prevent Vault search terms from ever being passed outside of the LastPass application.
- Search Within Secure Notes: Selecting the Search/URL bar while inside of the Vault will allow you to search for a specific entry saved or for a Secure Note. Searches now include the ability to search within the secure notes, instead of by title alone. Secure Note content is not pre-decrypted in memory, so those users with numerous secure notes may see significant slow downs during their searches.
- Launch to: Enables you to change whether LastPass launches a site in the LastPass Browser or your default web browser.
- Browser home page: Sets the LastPass Browser’s homepage.
- Warn before filling insecure forms: Shows a warning notification before filling in login forms on insecure sites.
- Show suggestions from Google: When entering text into the URL bar of the LastPass browser, you will be prompted with a list of suggested search terms – similar to the search prediction feature used by Google.
- Warn before filling insecure forms: When submitting to a website through the LastPass Browser, this option will check that the connection is over HTTPS as well as looking for the domain of the site to match the domain that the information is being sent to.
- Clear cookies on log out: Clears any stored site cookies on logoff.
- Close tabs on log out: Closes all open web browser tabs on logoff.
- Clear history on log out: Clears web browser history on logoff.
- Clear cookies on close: Clears cookies when you close the app.
- Use mobile user agent: Sets the web browser to request mobile set rendering from the server.
- Set default browser: Sets the LastPass Browser as your default web browser on Android.
- Advanced: The below options appear in this menu.
- Use mobile user agent: Allow sites to display their mobile versions by default (if available) when this option is enabled.
- Tabbed appearance: Enabled by default, this setting allows launched entries to be opened in new web browser tabs.
- Refresh Vault: Refreshes your Vault’s connection with the server to sync new or updated data.
- Clear LastPass cache: Clears the LastPass locally cached data.
- Enable Logged in Notification: Enables a LastPass icon in your notification bar to signal an active login.
- Remove Notifications on Activate: Removes logged in notifications after activating LastPass.
- Enable LastPass Input Method: Enables the LastPass Input Method.
- LastPass Data Center: Allows you to manually select which data center is used for log in.
Note: This does not migrate a user’s data between data centers, but will redirect to the other data center if the user logs into the one where their data isn’t. This option is only enabled when the user is not logged into the Vault.
- Local Data Location: Allows you to change the location of locally cached data from the default location.
- Local Attachment Location: Allows you to change the location of downloaded attachments or files.
- Default Site Action: Allows you to change the default action taken when selecting a site entry in the Vault.
Use the LastPass Android Browser
The LastPass Android App has a fully functioning web browser within the app. This web browser can automatically launch your sites, autofill your login credentials, and can even save new login credentials when you log in for the first time. When you launch a site from your Vault, you will automatically be taken to the that site in the LastPass Browser. You can also go directly to the web browser by selecting the LastPass Android icon in the top left corner of your Vault.
Once in the Browser and on a website, you can select the Options icon and be offered the following list of options to help your browsing experience:
- AutoFill to automatically fill login credentials for the current site.
- Show Matching Sites to display all matching site credentials.
- Fill Forms displays a selection of Fill Forms that you have saved in your account to be used on the current site.
- Save Site to save a site's username and password.
- Share Page to share the site link via another app on your Android device.
- Find in Page to type in specific search terms to find on the site.
- Request Desktop/Mobile Site to load the desktop or mobile version of the site.
- Print to save as a PDF on your device.
- Close All Tabs to close all of the sites in the Browser.
- Go to My Vault to easily access your Vault.
Additionally, you can select the Vault Options icon to access additional Vault Menu options.
Fill Android apps and Sites in Chrome
Once you have logged in to LastPass for Android, you can enable Autofill in your Settings, then use it to fill your login credentials for various apps and/or sites within Chrome.
- Log in to the app.
- Select the Vault Options icon in the upper left navigation.
- Select Settings > App Fill.
- Toggle the "Autofill login credentials" setting to On (enabled).
- Select Next, which will display your Android device's Accessibility menu.
- Select LastPass, then toggle the switch to On (enabled).
- Select OK.
- Go back to the LastPass app and you can optionally adjust the following settings:
- Show autofill dialog allows you to choose to either enable a notification to view autofill options again, or disable the autofill notifications and the quick settings tile.
- App settings allows you to customize the autofill settings for each app.
- Autofill notification settings allows you to enable/disable Fill Helper notifications for all apps or per app. The Fill Helper is designed for websites and apps that do not allow the Autofill window to pop up automatically.
- Automatically hide autofill notification allows you to customize how often the Fill Helper notification is hidden (or select Never to always display the notifications).
- Miscellaneous allows you to change Fill Helper settings for "Show fill helper bubble for browsers" and "Show fill helper bubbles for apps". This is a widget that appears on your screen that you can tap to select from your site entries for apps or web browsers.
To use Autofill for your login credentials within apps and websites, do the following:
- Log in to the LastPass App on your Android device.
- Open your desired app or navigate to your website, then tap within a login field.
- Your autofill experience will be either of the following:
- Automatic pop-up – LastPass will automatically pop-up a window containing matching site credentials where you can tap to select your desired credentials.
- Autofill with LastPass notification – If no pop-up appears, you can use the Autofill notification to use autofill. From the top edge of your device, swipe down to access your Android notifications, then tap to select the Autofill with LastPass option and select your desired credentials.
Use the LastPass Keyboard (input method)
If you choose to use the LastPass Keyboard, please be advised of the following:
- Sites that require a Master Password re-prompt cannot be selected for autofill within the LastPass Keyboard input method.
- The LastPass Keyboard input method cannot “see” into other web browsers. We suggest using the LastPass Browser within the Android app for the best experience for autofilling. However, if you are using this method to autofill for a website in another mobile web browser, please note that you will need to select Switch to Groups in most all cases (as LastPass cannot match the URL to your Vault since this information cannot be retrieved from the site through a 3rd party web browser due to Android security settings).
- If the LastPass Keyboard input method is unable to detect the login for your app and displays “No Matching Sites”, select the Switch to Groups option. This will display the list of the folders in your Vault, where you can then navigate to the specific entry and select “Fill” to autofill your username and repeat the steps to fill your password.
Enable the LastPass Keyboard
- Log in to the app.
- Select the Vault Options icon in the upper left navigation.
- Select Settings > Advanced.
- Locate the "Enable LastPass input method" setting and toggle the switch to On (enabled).
- When prompted, select OKto display your Android "Language & input" settings.
- Locate the "LastPass" setting and toggle the switch to On (enabled), then select OK on the confirmation window.
- Once enabled, go to your Android device's Settings, then under the "Keyboard & input methods" setting, select your Current Keyboard setting, then tap to enable the LastPass radio button.
Use the LastPass Keyboard
- Open your desired app or navigate to a website, then tap within a login field.
- Select the LastPass Key within your keyboard to display a list of site entries with matching logins.
- Select the Fill button to fill your for your desired login credentials, then continue the log in process for your app or website.
Use the Fingerprint Scanner (for supported devices)
The Fingerprint Scanner can be used as a means of authentication when you are using an Android device that supports fingerprint identification.
Enable the Fingerprint Scanner
- Log in to the app.
- Select the Vault Options icon in the upper left navigation.
- Select Settings > Security.
- Locate the "Use fingerprint to unlock" setting and toggle the switch to On (enabled).
Use the Fingerprint Scanner
The option to use the Fingerprint Scanner will appear in the following scenarios:
- When you have enabled Reprompt for Master Password (globally or for specific site entries).
- When you have saved your Master Password in the App login page, and are returning back to the app. Additionally, you must go to the Vault Options icon > Settings > Security > Toggle the "Lock LastPass automatically" option to On (enabled).
- When you have a company policy that requires a Reprompt for Master Password (Enterprise users).
- If you have enabled the Reprompt for Master Password setting in the App Fill Window.
Manage Shared Folders (for Families, Teams, or Enterprise users only)
You can add and manage Shared Folders when you are a LastPass Families, Teams, or Enterprise account user. Using the LastPass Android app provides universal access and real-time updates from anywhere, with the ability to change settings at a moment’s notice.
To get started, log in to the Android app, then select the Vault Options icon in the upper left navigation and select Manage Shared Folders.
Once you access your Shared Folders, you can choose from the following options:
- Add a new folder – Select the Add icon to create a new Shared Folder.
- Edit an existing Shared Folder – Select your desired Shared Folder, then select Edit and choose from the following:
- You can Share with a pre-populated user or add an email address and select Share. Optionally, you can adjust the Read-only and/or Show Passwords settings before you share.
- You can Unshare with a selected user by selecting the user's name, then selecting Unshare.
- You can change user permissions on a specific Shared Folder by selecting the folder then selecting Edit > [user's name] > Edit > select from Read-only and/or Show Passwords > Save.
Additionally, you can add sites to your Shared Folder from your Vault. Tap to select a site in your Vault, then select Edit, locate the "Folder" field and use the drop-down menu to select your desired Shared Folder. Shared Folders and the logins added to them will sync automatically to the Vaults of any LastPass users given access to the Shared Folder(s).
About application Permissions
With the introduction of granular permissions in Android OS 6 (Marshmallow), we felt our customers would like to know which permissions we ask for and why. Below is a full list of the permissions we use and their function.
Why does LastPass request permission to use the microphone?
This is so that you can record audio attachments to add to Secure Notes.
Why does LastPass request permission to write to external storage?
This is so that you can save encrypted attachments data to external storage, and so that file downloads in the LastPass Browser can be supported.
Why does LastPass request permission to receive data from the internet?
This is so that we can receive push notifications for Vault changes and sync your Vault.
Why does LastPass request permission to use NFC?
This is so that we can support YubiKey Multifactor Authentication.
Why does LastPass request permission to get the list of user accounts?
This is required so that LastPass can receive push notifications of Vault changes on devices running Android OS 4.0.4 (Ice Cream Sandwich) or earlier. Unfortunately there is no way to specify this permission dynamically, so it is required for all versions of Android OS 4.1 (Jellybean) or later.
Why does LastPass require the billing permission?
This is to support the ability to purchase LastPass Premium from within the app.
Why does LastPass require permission to keep the phone awake?
This is required for push notifications, to let the app know when the Vault has changed on the server and should be refreshed.