The Security Dashboard in your LastPass Vault displays your security score, your dark web monitoring alerts, and all email addresses currently being monitored or those you have chosen to stop monitoring.

Security Score

Your security score is calculated automatically by evaluating all of your stored site passwords in your Vault. If there are passwords that are considered unsafe (i.e., weak, reused, old, or missing), you are advised to change the site password in order to maintain good password hygiene. As more site passwords are added and evaluated, your security score updates and shows you how your passwords measure up with security best practices, and prompts you to make any updates needed. Learn more about fixing at-risk passwords.

Dark Web Monitoring

The dark web monitoring feature evaluates all of your stored email addresses for the items in your Vault, and alerts you immediately – via email notification and within the Security Dashboard – if any of your email addresses have been found in the database of breached credentials. If you have compromised email addresses, you are guided through steps to change your password for the site associated with the breach. You can also manage the email addresses you want to exclude from being monitored. Learn more about managing dark web monitoring alerts.

Additionally, if you have stopped monitoring an email address, you can always start monitoring for the email address again at any time.

Please note that only email addresses associated with your own item entries can be monitored within your account. This means that if you share a Vault item (and have enabled the email address for that Vault item to be monitored) it will be monitored within your Security Dashboard. However, if another LastPass user has shared a Vault item entry with you (individual or shared folder), those email addresses belong to the sharer's Vault, and will not be monitored within your account. They may, however, be enabled to be monitored within the sharer's account.

The LastPass Security Dashboard allows users to see an overview of the security of all their accounts in one place. This view is much easier to use and provides actionable steps to help users strengthen their online security.

The previous functionality, which was called the LastPass Security Challenge, required users to manually run a security scan every time they wanted to see the health of their accounts. Now, every time they open their Security Dashboard, their information is immediately available to them.

We’ve also introduced dark web monitoring, which allows users to monitor their email addresses for breaches. Previously, users could manually check if their email addresses had been compromised at that one point in time, but in the new experience their email addresses are being continually monitored. Users simply enable dark web monitoring once, and it will run in the background, making sure their information is secure. The new experience also provides alerts in the Security Dashboard and email notifications every time their email address is associated with a breach.