LastPass is committed to handling customer data responsibly.
LastPass has developed a data privacy program that aligns with today’s relevant privacy regulations and rules and considers the key data protection frameworks from across the world. Our program includes, but is not limited to:
LastPass’ TRUSTe Enterprise Privacy & Data Governance Certification reflects our commitment to maintaining the highest standards for managing personal data.
In addition, LastPass has obtained the Asia-Pacific Economic Cooperation (APEC) Cross Border Privacy Rules (CBPR) and Privacy Recognition for Processors (PRP) certifications.
We designed our privacy policy to help you understand the information we collect, why we collect it, and how you can exercise your rights.
View privacy policy
We utilize cookies and similar technologies to provide, protect, and enhance our website and services.
View the cookie notice
You can actively manage your data and exercise your individual privacy rights (delete, access, export, etc.). Please review “Your Rights and Contacting LastPass” for more details.
View your privacy choices
LastPass enables customers to comply with global privacy regulations to maintain data integrity and confidentiality when transferring data worldwide.
View terms and conditionsLastPass aims to provide our global user base with the best possible experience. To help ensure sufficient service availability, uptime, and redundancy, we deploy a combination of geographically distributed physical co-location facilities and cloud hosting providers that replicate in near-real-time.
Technical and organization measures
LastPass has implemented and maintains appropriate technical and organizational measures to preserve data confidentiality, integrity, and availability. This includes detailed information regarding LastPass’ zero-knowledge encryption capabilities and other comprehensive security measures.
To provide and operate services, LastPass engages with first and third-party sub-processors.
Guidelines for government requests
We will not disclose customer information unless presented with a valid warrant, subpoena, court order, or equivalent legal process. Additionally, LastPass may attempt to narrow requests that it deems excessively broad, request further clarification if the nature of the investigation is ambiguous, or contest the request for other reasons.
Your single source for the latest security, privacy, compliance, and system performance information.
Visit Trust Center
Safeguarding your data is what we do, with proactive security and reliability as cornerstones of our mission.
Learn more about security
Learn the latest about our cybersecurity practices from our Threat Intelligence, Mitigation and Escalations (TIME) team.
Read recent posts
Explore LastPass’ terms of service, privacy policies, and other legal policies and documents.
Go to Legal Center