Dark web monitoring continuously monitors databases of known breached credentials, and immediately sends you alerts through email and the Security Dashboard when it finds any of your email addresses stored in your vault in these databases.
Notice: Dark web monitoring is automatically enabled.
Tip: The admins of LastPass Business can manage the "Control dark web monitoring" policy for the end users.
If any of your email addresses have been compromised, you'll receive instructions on how to change your password for the associated site. You can also choose which email addresses to exclude from monitoring at any time, or if you change your mind later, you can resume monitoring that email address. Learn how to manage your dark web monitoring alerts.
Your email addresses are stored in hashed form for monitoring purposes only and are not used for any other purpose.
Note: For individually shared items, the associated email address is monitored only in the sharer's Security Dashboard. For example, if you share a vault item with a monitored email address, it will only be monitored in your own Security Dashboard. Conversely, if a vault item is shared with you, the email address will only be monitored in the sharer's Security Dashboard, not in yours.
Restriction: Email addresses associated with stored site passwords in shared folders are not monitored.
Note: This feature is not available in the LastPass Password Manager app for iOS and Android. However, mobile users can run the Security Challenge on their device if they have a LastPass Premium, LastPass Families, LastPass Teams, or LastPass Business plan, or if their mobile device is set as a primary device for the Security Challenge. Additionally, mobile users can enable dark web monitoring when they access their vault on a desktop device.
Limitations
Note: Dark web monitoring evaluates the following number of emails:
- LastPass Free: 10 email addresses
- Paid or free LastPass Premium, LastPass Families, LastPass Teams, LastPass Business: 200 email addresses
You can start, stop, or add new email addresses that you would like to have monitored.
Restriction: If you have a LastPass Business account, the ability to perform these actions may be limited or prohibited due to policies enabled by your LastPass admin.
Related Articles