Using LastPass's Security Dashboard

LastPass's Security Dashboard is a quick checkup that tells you whether anything in your LastPass vault needs attention.

How to Find Your Security Dashboard

  1. Click on your LastPass browser extension.
  2. Click on the Vault button.
  3. Look at the menu on the left side of the window that opens.
  4. Select Security Dashboard.

What Does the Security Dashboard Show Me?

At the top of the dashboard, the first section is your Security Score. It can be anywhere from 0–100.

This score is a general health check for the passwords stored in your LastPass vault. The score considers several security practices, such as the strength of your passwords and whether you are using additional protections such as Multi-Factor Authentication (MFA).

A lower score does not mean that your account has been hacked. It simply means LastPass has identified areas where you can improve your password security.

The next section is Dark Web Monitoring.

LastPass monitors email addresses associated with your LastPass entry against a database of known data breaches. If one of your monitored email addresses appears in compromised data, LastPass can alert you.

An alert does not necessarily mean someone has accessed your account. It means information associated with that account has appeared in a known breach and you should review it.

If you receive a dark web or compromised-account alert involving your TFCA email address or a TFCA account, please:

  1. Review the account identified by LastPass.
  2. Change the affected password to a new, unique password.
  3. Do not reuse the old password anywhere else.
  4. Contact IT if the alert involves a TFCA account or if you are unsure what the alert means.

Please don't ignore a LastPass security alert simply because the affected account seems unimportant. Reused credentials are one of the ways attackers can move from a less-important account to a more-important one.

What Should I Do With My Security Dashboard?

You don't need to check it every day. Once you have improved your security score, set a reminder to check your score quarterly.

In order of importance:

  1. Compromised accounts or security alerts — address these first.
  2. Reused passwords — replace them with unique passwords.
  3. Weak passwords — replace them with stronger passwords.
  4. MFA recommendations — enable MFA where appropriate.
  5. Dark Web Monitoring — make sure monitoring is enabled for the email addresses you use for important accounts.

You don't have to fix everything at once. Even correcting a few weak or reused passwords makes your accounts safer.