nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Home

How Does Dark Web Monitoring find Email Addresses?

unknown

When logging onto he new Security Dashboard, the "Dark Monitoring web" list two of my email address on Apple's site.. why are these there ?

Does this mean they've been exposed or just picked up as being "Monitored" from your LP vault ? Password are secure anyway so its ok.. but i wonder why there listed.

I have NOT started monitoring, because i don' want my info shared with other parties as outlined.

Find more posts tagged with

Comments

rwzeitgeist

@Richard82

Richard,

I've been a paying LastPass user for several years.

The current design of the Security Dashboard fails to provide users the ability to manage the content of the list of monitored addresses. You can enable or disable monitoring of the addresses in the list, but you cannot add entries to the list or remove entries from it.

The LogMeIn support staff incorrectly asserts that all email addresses that appear in password entry Username fields will appear in the list of monitored addresses. My vault currently contains over 200 password sites with valid email addresses in the Username field, but my list of monitored email addresses on the Security Dashboard page contains a mere 15 entries. I created a support ticket about the missing entries and my inability to manage the content of the list. After a lengthy discussion that apparently included indirect exchanges with developers, I decided LogMeIn wasn't interested in resolving the issue and I closed the ticket.

At this point I have zero confidence that LastPass is searching the dark Web for the ~200 unique email addresses absent from my Security Dashboard's list. I hold out some hope that a future revision will correct the current design and implementation errors. Until those fixes happen I'm ignoring the Dark Web Monitoring feature.

RachelO

Hi @Richard82,

You can start monitoring email addresses for dark web monitoring by adding an item in your Vault which uses the email address you'd like to be monitored. For example, if you want test@email.com to be an option to be monitored you would need to have an item/password in your Vault saved with test@email.com as the username.

Next, In the Security Dashboard > Dark Web Monitoring area of your Vault, locate the email address you want to include, then click Start monitoring. Your selected email address is now being monitored.

ref: https://support.logmeininc.com/lastpass/help/how-do-i-start-monitoring-individual-email-addresses-for-dark-web-monitoring

Richard82

Hi,

I'm a new user to Lastpass and have noticed that in the dark web monitoring section Lastpass is monitoring for the email adddresses for my two daughters (good) but not me or my wife or other addresses. How do I add new addresses to be monitored?

rwzeitgeist

My Security Dashboard currently lists only 11 email addresses. How did those 11 addresses get selected?

You message suggests LastPass checks every email address that appears anywhere in my vault, and not just the 11 address listed in the Security Dashboard. Since I typically create a unique email alias for each account I establish and I've been doing so for around 25 years, my vault contains several hundred unique email addresses. How do I manage (turn off or turn on) dark web monitoring for email addresses that don't currently appear in the Security Dashboard list?

RachelO

Hello,

Yes, the dark web monitoring feature evaluates all of your stored email addresses in your Vault items and alerts you via email notification and within the Security Dashboard if any of these found email addresses have been found in the database of breached credentials once they are set to be monitored.

With dark web monitoring, LastPass proactively checks your email addresses against our partner Enzoic’s database (previously named PasswordPing) of breached credentials. Your machine sends only encrypted email addresses to Enzoic.

Quick Links

Join the conversation!

If you found this discussion useful, why not register/sign-in? It only takes a minute to share your feedback, ask a question, or vote for a new feature!