Home

Security Score for Shared Folders in Lastpass Families

The security dashboard and score only shows the score for the small handful of passwords that are unique to my account. It doesn't show a score for any folders which I have shared (I'm the admin of) or which have been shared for me. How do I see the other scores so I can update old, weak, or compromised passwords?

Find more posts tagged with

Comments

tarapup

LogMeIn was acquired by a private equity firm in August 2020. Not a good sign.

classics6

Seconded @alexmaskovyak!

The worst part, LastPass is still intentionally misleading its family users into thinking this feature works for all passwords.

FWIW - The switch to 1password was easy. Maybe 5 minutes to sign up and transfer all my passwords to a properly shared vault. So far 1password has a much more friendly user interface (my wife and children have a much easier time filling in passwords across their devices), and their WatchTower does a much better job showing us the weak links than Security Dashboard did even before LastPass intentionally broke it.

With their 50% off promo for families, it is cheaper than LastPass' plan for the first year. I'd guess anyone concerned enough to be reading this thread will find the additional fee (after the first year) well worth it for the convenience to monitor the entire family with a user interface that makes it much more likely for other members to participate.

Also, LastPass was kind enough to honor @RachelO's offer for a full refund. Make sure you ask for one when you switch!

alexmaskovyak

For clarity here:

1. The ask here is to provide a security scores across all folders to which a user has access since otherwise the security score is worthless at identifying issues especially in cases where Shared Folders are being used for the majority of passwords.

2. If that is technically infeasible, the subordinate ask is to provide individual scores per folder which is identical functionality that already exists in LastPass Teams. This would also provide a mechanism to identify and correct weak passwords.

Honestly, I personally don't really have much of a horse in this race now since I've migrated to 1password which provides a much easier mechanism for sharing and evaluating security via shared vaults. However, there are numerous current users who would benefit from fixing this deficiency.

beta2071

What has happened to this product/company???? This cannot be a technical issue as the "feature" exist in some versions currently. I guess the development teams are too busy building tracking functionality to actually respond to paying customers.

tarapup

Security is only as good as the weakest link. A share item should be included, although it should be flagged as shared.

The point of the score is an indicator of issues, this isn't a contest.

baileyjrs

I agree with the customers here who have expressed concern about the inability to obtain a security analysis of passwords in shared folders in the Families offering, for the reasons they describe. I too just upgraded to the trial version of Families and converted our family's folders to shared, which include nearly all our hundreds of passwords, only to find afterwards that we can't get an analysis of our password security via the dashboard or dark web monitoring. This is a major weakness in the Family offering. Is LastPass going to fix this?

classics6

Hello @RachelO ,

Thank you for your offer. Unfortunately that sounds like a standard response for a company more interested in stuffing its private investor's pockets than serving its mission to consumers, which ironically specifies families explicitly:

It remains our mission to deliver customer satisfaction by delivering secure solutions that our customers can trust to secure the data of their businesses and their families. -Ferenc Kun

Great, you are willing to give me and anyone else that discovers this bug and stumbles upon this discussion a refund. How about the thousands of other families that read your false advertising and falsely believe you are monitoring all their account ids on the dark web and password for strength? The update that removed this feature is sloppy at best, and malicious at worst.

Here is how a company with integrity should respond:

Issue a public apology on its website stating the false claims about the family plan features.
Issue a direct message to all family plan users notifying them of the bug, and offering the same refund you offered those that read this discussion.
Fix all your advertising to clearly state what you do and do not receive with the family plan.
- Eventually, when nobody enrolls in the family plan because its excessive cost with minimal features, fix the bug that caused security dashboard to be removed in the first place.

Thank you for taking this opportunity to focus back on your mission and provide transparency to the families you intend to protect.

DAR5899

Hi Rachel

I appreciate that - "This has been an issue that was brought up. We have shared the feedback from this thread with our development team ..." . So when is it going to be fixed. As I stated in earlier messages I know this this not a technical issue (in fact I was able to use the Security Score feature for Shared files in Families when it was first rolled out - it then disappeared!!).

This looks like it is a business issue but it should be a customer satisfaction issue. The whole purpose of LastPass is to improve password security - why would you withhold this very useful feature from customers that use Families Shared folders?

Just fix it now!

Thanks.

RachelO

Hello @classics6,

We have shared the feedback from this thread with our development team to show interest in adding more controls over what is included in the Security Score, such as including shared folders and specific reports on items in those shared folders and their security scores for LastPass Families admins. If you would like to request a refund, please create a request with our support team who can resolve any billing or refund requests, by scrolling down on this page and clicking the "Contact Support" link: https://support.logmeininc.com/lastpass/help/how-do-i-contact-customer-support-for-lastpass-lp010121

classics6

The arguments why this feature was turned off don't seem to make sense. Wouldn't you want to know if you were using a weak password shared by someone else?

We also just upgraded to families, and were definitely deceived by the advertising about Families.

Families includes everything in Premium, plus:

6 Premium licenses
Group and share items in folders
Family manager dashboard

After spending the entire day moving our items to the shared folder, we were shocked to find that the security dashboard no longer functions. No indications of this anywhere, and it certainly makes the family account worthless.

LastPass, you need to disclose that Premium features are disabled by using features offered in the family plan. Please provide an update on this matter. Either correct this error, or provide us with a refund for not being able to utilize the features promised when we signed up.

beta2071

I'm a 10 year Lastpass premium user who just upgraded to Family to help teach my children proper password management. We have several shared folders for sites not having them included in the security audit is ridiculous. Also had issue with permissions setup on the shared folders which required a lot of moving/deleting/recreating of folders to finally get it working. Overall, not real impressed with Families so far. Hope this security audit issue gets resolved. All of this has me looking for other options.

shubharora734

I'm not using Teams, I'm using Families. Is there a way to do this in Families?

RachelO

Hello everyone,

Currently shared items are not included in the security score as the security score audits passwords which are only in your vault, but I have shared the feedback from this thread with our development team to show interest in adding more controls over what is included in the Security Score, such as including shared folders and specific reports on items in those shared folders and their security scores for LastPass Families admins. While we don't have any news to share yet, I will update this thread in the future if any changes are made by our development team.

jaco-vanderbyl

I've recently purchased LastPass Families to improve our family's security profile and I spent a lot of time adding all our passwords and organising them appropriately in folders. The vast majority are shared between my wife and I. I had assumed -- rightly so, I'd say -- that after adding all our passwords, I'd be able to get a report on our overall security score. Learning that that is not the case is disappointing and puzzling.

I agree with other contributors. Admins of LastPass Families ought to have control over the folders that are included in the Security Score. A sensible solution would be to automatically include shared folders just like regular folders, and to provide admins with the functionality to exclude selected folders and/or individual folder items. This might be hard to roll out, given that it'd affect existing clients's score (although that might be desirable), so failing that, the shared folders can remain excluded per default with the option for admins to include them should they so wish (apparently like LastPass Teams already allows).

Can this please be considered?

RossComer

Hi jbyamada,

You may get a better response if you include the exact links that are not working for you. I have clicked every link in this post and the only one that didn't work was one that was Teams related and this thread is really about Family accounts.

jbyamada

I am trying to follow these instructions but the link in the response did not work

AFNL

Fully agree previous contributions. Without the safety check of ALL shared folders, Lastpass Families misses the most essential feature for me as administrator. Please solve this problem !!!

CeesT

I am having the same problem. No security score in shared folders. I should also be able to monitor a weak password put into a shared folder and act upon it. C'mon LastPass, do something about it.

RossComer

There is a quick workaround...

In one account, create a new folder called Temp

Move all of the passwords in Shared to Temp
Go to https://lastpass.com/sess.php and select and kill all your active sessions (per https://community.logmein.com/t5/Support-Discussions/Security-Dashboard-won-t-update-quot-Old-quot-password/m-p/255463/highlight/true#M25002)
Re-login and re-run the security challenge.
Once you are complete checking your passwords, move everything in Temp back to Shared.

Ugly, but it works until they fix it.

DAR5899

I agree that the Security Dashboard needs to include all Family Shared Folders!! It is useless without this.

When the Security Dashboard was first available it did include all the passwords in my Family Shared Folders. When I ran it today they were not included ?? This needs to be fixed.

RossComer

Echoing the concerns about passwords in shared folders not being included in the security score OR the password security page. Most of the passwords in my family account are in a shared folder. I need to be able to review all of the passwords used by my family to ensure the security of all our accounts.

alexmaskovyak

As a folder administrator I own and control the sites that have been shared. As such, I'm responsible for their security and without the assistance of security score features on these sites I'm unable to maintain or improve them.

Similarly, if I have access to a site that's shared with me I may be 1. co-responsible for its security if I can alter the credentials or 2. need to understand how secure the site is to make decisions about whether to use it and/or add sensitive data to it.

Teams provides a mechanism for getting a security score for shared folders. Since a large number of the accounts within the family are shared to some degree, Teams would allow me to identify weak passwords on those shared accounts so that they can be updated. If Teams can provide this information Families should be able to do so similarly.

This is a large enough concern that I migrated to 1password this weekend whose family-tier allows you to score individual vaults and their respective sites easily. This has already allowed me to dramatically improve my family's security footprint.

maverick747

Shared items/folders are excluded from security challenge. This is because if someone shares a weak password with you it should not effect your own security score and same goes the other way around.

alexmaskovyak

If LastPass Teams is of comparable cost to Families for 3 users that sounds good. But it doesn't seem like it is. It seems like it is 3 times as much.

RachelO

Hello Again,

I'm so sorry about that! You can definitely convert your Families account to a Teams account, to get that conversion started please scroll down on this page and click Contact Support to open a ticket with Support who can do this for you: https://support.logmeininc.com/lastpass/help/how-do-i-contact-customer-support-for-lastpass-lp010121

alexmaskovyak

I'm not using Teams, I'm using Families. Is there a way to do this in Families? If not, can I convert from Families to Teams easily?

RachelO

Hello,

The admin of the Teams account should be able to view shared folder details in the Admin console, by clicking on the "Security score" section. Please note that users who are admins on the Shared Folder but are not admins of the Teams account will not be able to see these details, only account admins can see these details.

For more detailed instructions on how to view these details in the admin console, please see https://support.logmeininc.com/lastpass/help/view-and-manage-lastpass-teams-shared-folders-admins-lp... ^RO

Quick Links

Join the conversation!

If you found this discussion useful, why not register/sign-in? It only takes a minute to share your feedback, ask a question, or vote for a new feature!