How to disable LastPass tracking

by

These are not the best two weeks for a password manager behemoth LastPass. The news first came that it makes the free version much less useful by limiting accountants to one type of device. And now, as reported by the Tablet, it turns out that LastPass includes at least seven rooted trackers by default.

Here’s everything you need to know, including how to stop LastPass from being tracked in just three easy steps.

Seven trackers rooted in LastPass password manager app

The rooted trackers were first discovered in a review of the LastPass Android app by Exodus, built by German security researcher Mike Kuketz who blogged about it in German. Of the seven detectors, four came from Google and are used both for analytics and crash reporting. The remaining three trackers come from AppsFlyer, MixPanel and Segment. According to the Table, the latter is useful for marketing teams because it has the ability to account for cross-platform consumer activity.

A LastPass spokesperson told the publication that “these trackers collect aggregated aggregate statistical data about how you use LastPass which is used to help us improve and optimize results.”

How worrying is this?

For me as a security watchdog, the most important thing to note here is that LastPass has also made it clear that “sensitive personal user data or cellar activity could not be passed through these trackers.” This means that credentials such as usernames and password data are not collected or recorded by these trackers. It should also be noted that LastPass is far from alone when it comes to password managers confirming such tractors. Exodus research suggests that, of the big names, 1Password and KeePass do not include any trackers, but Bitwarden and Dashlane have two. In fact, as iPhone users found out when Apple started becoming more aggressive with their iOS privacy labels, many apps come with such tractors.

The important difference here is that a user manager needs to trust the user, and nothing that can erode that trust is a good thing. Not a good thing either.

Need to switch to another password manager now?

However, I’m not saying that this is a good enough reason for happy users to ditch LastPass, especially as last year’s search found vulnerabilities in several password manager apps. last year, but that option is there if you want it. Anything that introduces a potential attack surface, which is what some security researchers call the content of such a third-party administrator, is definitely a password cellar product. provides a break from thinking.

Moving your password cellar from one app to another is easy enough, although getting used to a different user interface will take some time. If you’re sticking with LastPass, the good news is that it’s also pretty easy to disable these trackers.

MORE FROM FORBESThose 2 words and 1 number appear in 44 million dangerous passwordsRo Davey Winder

Here’s how to choose to monitor LastPass in three easy steps

Step 1.

Reaching the required settings seems to mean leaving your smartphone app and opening the LastPass cellar on your computer instead. So open the cellar and then select account options.

Step 2.

Now select the ‘show advanced options’ option and then scroll down to the privacy section where you should deselect the ‘Help Improve LastPass’ checkbox.

Step 3.

Now press the update button and enter your master password to confirm the changes, and you disabled the system in LastPass.

Some people have already emailed me asking if they should turn off the ‘Track History’ option, but personally, I would advise against this as it is a LastPass security function there. This keeps a log of logins and events for the LastPass account. These logs can be very helpful in viewing unauthorized activity by showing account login date, fields accessed, IP address and what was done.

You can delete this log at any time by selecting ‘View history history’ from the Advanced Options menu and hitting the ‘Clear History’ button.

I have reached out to LastPass for more information.

.Source