This feature is not available for LastPass Free users. Learn how to upgrade to LastPass Premium, or view LastPass plans and pricing for feature information.

The Security Dashboard in your LastPass Vault displays your security score, your dark web monitoring alerts, and all email addresses currently being monitored or those you have chosen to stop monitoring.

Note: The Security Dashboard feature is not available in the LastPass Password Manager apps for iOS and Android, however, mobile users can run the Security Challenge on their device.

Security Score

Your security score is calculated automatically by evaluating all of your stored site passwords in your Vault. If there are passwords that are considered unsafe (i.e., weak, reused, or missing), you are advised to change the site password in order to maintain good password hygiene. As more site passwords are added and evaluated, your security score updates and shows you how your passwords measure up with security best practices and prompts you to make any updates needed. Learn more about fixing at-risk passwords.

Note: LastPass uses the industry-standard zxcvbn library to assist in calculating each password's strength. As a result, your individual passwords' strength and your security score for all of your passwords in your Vault may vary. Individual password strengths can be 0-25-50-75-100 while the security score can be anywhere between 0-100. Learn more about password strength and security score calculation.

Dark Web Monitoring

The dark web monitoring feature evaluates all of your stored email addresses for the items in your Vault, and alerts you immediately – via email notification and within the Security Dashboard – if any of your email addresses have been found in the database of breached credentials. If you have compromised email addresses, you are guided through steps to change your password for the site associated with the breach. You can also manage the email addresses you want to exclude from being monitored. To get started, click Start monitoring in the dark web monitoring pane, and learn more about managing dark web monitoring alerts.

Please note that for individually shared items, the email address associated can only be monitored within the sharer's Security Dashboard. For example, if you share a Vault item that has a monitored email address, it will only be monitored within your own Security Dashboard. Alternatively, if a Vault item is shared with you, then the email address will only be monitored within the sharer's Security Dashboard and not yours.

Additionally, shared folder items that have email addresses associated with the entries will not be monitored.

The LastPass Security Dashboard allows users to see an overview of the security of all their accounts in one place. This view is much easier to use and provides actionable steps to help users strengthen their online security.

The previous functionality, which was called the LastPass Security Challenge, required users to manually run a security scan every time they wanted to see the health of their accounts. Now, every time they open their Security Dashboard, their information is immediately available to them.

We’ve also introduced dark web monitoring, which allows users to monitor their email addresses for breaches. Previously, users could manually check if their email addresses had been compromised at that one point in time, but in the new experience their email addresses are being continually monitored. Users simply enable dark web monitoring once, and it will run in the background, making sure their information is secure. The new experience also provides alerts in the Security Dashboard and email notifications every time their email address is associated with a breach.