"ShowPassword" extension. Security concern!!!

Customer forum for LastPass Enterprise

Moderators: admin, azitnay, anatoly_LP, chantieLP, JoeSiegrist, robyn

"ShowPassword" extension. Security concern!!!

Postby tan89 » Fri Aug 17, 2018 3:06 pm

Shared login's users can see the shared password, even you have checked the hide password when you shared the logins. Shared login's users can get an extension called "ShowPassword" on their browser, which will display the password for the sites that you shared with users.

I have submitted the ticket about this issue, and hopefully LastPass will come up with a good solution.
tan89
 
Posts: 1
Joined: Fri Aug 17, 2018 2:58 pm

Re: "ShowPassword" extension. Security concern!!!

Postby jpenny84 » Sat Aug 18, 2018 2:21 am

LastPass has zero control over a password after it is released into the browser. This is already disclosed in the documentation. Savvy users, third party utilities, and even other password managers can reveal or capture the password.

https://support.logmeininc.com/lastpass ... 0007#About

Best practice is to be aware of this and share accordingly.
jpenny84
 
Posts: 8669
Joined: Tue Mar 06, 2012 9:10 pm

Re: "ShowPassword" extension. Security concern!!!

Postby FlyingHawk » Sat Aug 18, 2018 3:47 am

What jpenny84 said.

If you want someone to use your password, they must have access to it one way or another. If they have access, there will be a way for them to see it explicitly, one way or another. LastPass doesn't control your and the sharee's browser/OS/hardware etc.

The feature is only ever meant to make seeing password more difficult for the sharee. It's fundamentally impossible to completely prevent the sharee from seeing it.
FlyingHawk
 
Posts: 791
Joined: Wed Mar 18, 2015 12:04 pm


Return to LastPass Enterprise

Who is online

Users browsing this forum: No registered users and 10 guests