ExtensionPedia
LastPass: Free Password Manager

LastPass: Free Password Manager

LastPass is an award-winning password manager for secure credential management on any device.

Risk Summary

4.6 /10

Medium Risk

For extension version 4.151.4

Latest Version
Critical Permissions Severity
No CVEs
Updated Version Age
Manifest V3
Fair Engagement Rate
CVEs

Not Scanned

This extension version has not been scanned for CVEs yet

Behavioral Detections

Behavioral Detections

Unlock the full MITRE ATT&CK matrix

Request a Demo
Permissions (13)
Name Severity
Request Read

Access to network traffic

Critical
Scripting

Extensions with the scripting permission can inject and execute code in web pages, which can potentially be used for data exfiltration or session hijacking (requires host permissions, available since Manifest V3).

Critical
Privacy

Extensions with the privacy permission can manage browser features that may affect user privacy and safety, for example turn off phishing protection (safeBrowsingEnabled).

High
Tabs

Extensions with the tabs permission can query the url, pendingUrl, title, and favIconUrl of any tab.

High
Unlimited Storage

Extensions with the unlimitedStorage permission have no storage quota restrictions for chrome.storage.local, IndexedDB, Cache Storage, and the Origin Private File System.

High
Web Navigation

Extensions with the webNavigation permission can track websites the user visits by listening to navigation events.

High
Alarms

Extensions with the alarms permission can schedule code to run periodically or at a specified time in the future.

Medium
Clipboard Write

Extensions with the clipboardWrite permission can modify the system's clipboard content.

Medium
Context Menus

Extensions with the contextMenus permission can add items to the browser's context menu (also known as the right-click menu).

Medium
Off Screen

Use the offscreen API to create and manage offscreen documents.

Medium
Storage

Extensions with the storage permission can store and retrieve user data, which can persist even after clearing the cache and browsing history.

Medium
Web Request Auth Provider

Enables browser extensions to handle HTTP authentication requests and provide authentication credentials automatically

Medium
Notifications

Extensions with the notifications permission can display notifications on the user's desktop.

Low
Host Permissions (2)
http://*/*
https://*/*
Secrets

Not Scanned

This extension has not been scanned for embedded secrets yet

Privacy Policy

Privacy Policy

Unlock privacy policy risk assessment

Request a Demo