According to this article, there are seven separate trackers embedded within the LastPass Android app. Can you confirm why LastPass requires so many in comparison to your competitors? The article gives some advice from LastPass on how to disable this tracking, but the options to disable tracking don't appear for me. Please can you help.
Hi@"Tarpii"
You can read about our use of this information in this blog post.
@GlennD: thanks for the info on how to disable the trackers. I must point out that both having an "Advanced Settings" (under the "Account Settings" section) along with an "Advanced Options" (at the top level) in the Vault UI is pretty confusing. Until I found your post I was just dumbfounded on where these settings were, since someone said "Advanced Settings" online and all I was seeing was "Advanced Options".
If you don't mind, please let me know what you find. I'm inclined to use Bitwarden (paid) since it looks a lot like LP and there's something noble about open-source apps for Mac.
How do I opt out of all tracking. Do I need to do it from the PC chrome extension? my android phone app? or log into the website and disable it there?
What are the navigation selections required to get to the options and how do I opt out?
Thank you.
LP should be ashamed of itself....here's what comes up from the (i) link at the Track History option:
Maintain a history of your website logins and form fills. When disabled, History and Recent Sites will be empty on the vault and extension, respectively.
Recommended: SELECTED
------------------------------
Where else do I need to make changes to insure that there's NO TRACKING taking place in my account?
This would also be a good time for LP to let us all know what else is lurking in the app.
Unfortunately under the privacy settings there are only two options for tracking and not 7 like theresearcher Mike Kuketz stated:https://www.theverge.com/2021/2/26/22302709/lastpass-android-app-trackers-security-research-privacy.
I have a family account with LastPassand I've been with you guys for a few years however this recent discovery that there are 5 trackers that I wasn't asked or given permission for disturbs me heavily. I'm very tempted to jump ship and go with someone else if this is how LastPass is going to run their business.
Hi,
The privacy and security of our users is always a top priority at LastPass, which is why LastPass was designed with a patented zero-knowledge security model to protect sensitive customer data. No sensitive personally identifiable user data could be passed through these trackers. These trackers are industry standard mobile analytics tools and are used for a limited purpose – to collect aggregated statistical data about how LastPass is used to help us improve and optimize the product to deliver the best user experience. We are continuously reviewing our existing processes to ensure we are prioritizing our customer’s privacy and security. For more information on LastPass and LogMeIn’s commitment to privacy and security, please visit our Trust & Privacy Center at https://www.logmeininc.com/trust and review our Privacy Policy at https://www.logmeininc.com/legal/privacy.
None of this data is shared with 3rd parties.
Oh for sure, I'm definitely going to check out bitwarden as well as it sounds intriguing. I love open source apps as well and when I used to work for apple 1password was used in the corporate environment which definitely says something. I'll let you know what I find
Ah ok. I agree as well. Definitely let me know.
I would like to hear a response to this as well - I 'maybe' can see this in the free offering, but definitely should not be a thing in a paid subscription?
I tried 1PW a few months ago and didn't find it particularly easy to use. I'll install Bitwarden in the morning and then post what I find. It's not the money, it's the provider's integrity and my level of confidence.
Thanx for posting.
Thank you very much for replying.
I don't want to be melodramatic, but after years of being a premium LP customer, it's time to move on...anyone have experience with Bitwarden?
I don't need/want a free password manager, just one that I can have confidence in...any other recommendations?
That's great that the information isn't identifiable and that you don't share it with third parties, assuming your telling the truth that's great!
What's NOT great and NOT ok though is that there are 7 trackers in the app and as a company you were not transparent with the fact that they were initially upon signup there nor are you allowing people to check out from ALL those trackers. Regardless of your intentions, as LastPass is an app that holds unbelievably valuable and personal information to it's users, any hint that there are ANY trackers is disturbing. There should be NO trackers of any kind unless the user specifically grants it. How is that so hard to understand?
@GlennD,
I am also very much interested to hear an answer to the question related to whether unselecting "Keep track of login and form fill history." in the Privacy settings actually disables the "7 trackers" including when using the app on an Android device.
The '7 trackers" issue coupled with the recent 'one device type' change announcement has me facing a decision of either migrating my passwords to another service or not.
I very much appreciate your clarifcation here.
Thanks,
Valyok
At the moment I'm looking at1password which per the previously mentioned researcher has no trackers. It is a pity because I love LastPass and my wife and I like its integration with everything. The fact that there is tracking of any kind on such a private and personal service doesn't sit right with me. I'll be making a post on my FB about this tracker issue to warn any of my friends to steer clear of LastPass. Perhaps you can try and fix your error LastPass before you lose too many people
Thanks for the fast reply.
I looked over Bitwarden and 1password a little bit yesterday. I've been a bit too busy today to do more research. Three things that stood out to me yesterday about Bitwarden:
1) They have two trackers but both are designated for crash reporting.
2) The interface isn't as polished as 1password
3) You cannot use Bitwarden when your offline/not connected to the internet as the service is cloud based. With LastPass and 1Password a server is used but you can activate an offline mode so you can still access your data without worrying about an internet connection.
#3 is probably the biggest turn off for me and from what I was reading on some reddit posts that is a big issue to some people. I also happen to own and use the Eero Pro mesh wifi setup for my router and they have a premium service i can get for $10 a month which includes advanced features, 1password/malwarebytes & a vpn service, all family packages included vs say $5 a month for 1password. At this point I'm going to try the 1password trial and give it a shot first.
I was told by support you can out out from within the web extension.
However that only disables some of the tracking
You have not sufficiently answered this question. How does unchecking these boxes stop the tracking?
Has anyone looked at Keeper Security -- this PW manager has a very high rating in PC World?
I'm very interested in Bitwarden, (U.S. News gave it an outstanding review) and this is posted at their community:
Unticking "Send anonymous error reporting data to help improve LastPass." may remove some tracking, but for sure not all. My Adguard app still alerts me about well-known trackers being attempted contacted.
Lastpass/Logmein needs to clean up this mess, fast!
That only stops some of the tracking going on.
I could live with crash analytics tracking, but marketing, no way !
I've seen several times you don't sell data to third parties, that's not really a valid statement, the third parties you use for tracking takes care of the data sales.
I installed Bitwarden and imported the CSV LastPass file...every came over correctly. Bitwarden is very easy to use; and for $10/year, it's hard not to like it.
I'm also trying to test Keeper Security, but moving data over from LP has not gone smoothly -- Identities and Payments did not come over. I contacted support since I'm not inclined to manually enter all the Identity address records and credit cards.
