Oct 6, 2010

LastPass How-To: Replacing a Site's Old Password with a LastPass Auto-generated One

So you've run the LastPass Security Challenge and now you know which of your passwords are "weak". You also know that replacing your old passwords with ones that you've auto-generated with LastPass will help you better protect your accounts.

Wondering what the next steps are?

LastPass tries to make it as painless as possible to replace old passwords. We’ll use a demo Gmail account to show you how to update the password for a site that you've already stored in your LastPass Vault with a new, randomly generated password.

Open the Site's Personal Settings

To begin, login to the target site and access the account settings or preferences page where you can change your password. In the case of a Gmail account, we have to go to the 'Personal Settings' section:


When you launch the ‘change password’ page, you will usually be asked to enter your old password and then a new password twice.

Fill Your Current Password

When you focus on the ‘Old password’ field by clicking on it, LastPass will prompt you with a notification bar. Select 'Fill Current' to fill in the current password you have stored for the site:


Generate a New Password

After clicking ‘Fill Current’ and autofilling your old password, you can then click ‘Generate’ from the same notification bar to create a random, unique password.

LastPass will pop a dialog box, where you can even click "Show Advanced Options" to specify the number and types of characters the new password should include:


Click ‘Accept’ to store the newly generated password in your LastPass Vault.

Autofill the New Password Fields

By clicking "Accept", LastPass also autofills the ‘New password’ and ‘Confirm new password’ fields with your newly generated password:


Save Your Password Update

Now click ‘Save’ on the website to submit the changes to your account. After clicking ‘Save’, LastPass will prompt you to either ‘Confirm’ that change or ‘Save New Site’:



By clicking on ‘Confirm’, you will tell LastPass to swap the new, generated password for the old one stored for the site. ‘Save New Site’ creates an entirely new entry for the site with your previous username and the new, generated password, while leaving the old site entry, with your username and previous password, intact.

If you choose not to 'Confirm' or 'Save New Site', the generated password will have its own entry in your Vault and you can manually replace the old password in your site entry.

The next time you login to your site, LastPass will autofill with the new, generated password. Now you really have no excuses to up the strength of your stored sites!


Have more how-to article requests? Send us a note at support@lastpass.com with your idea, and we may just cover it!

17 comments:

  1. Thanks for the post -- it's a good nudge to get those old passwords updated. There are just two minor tweaks I'd love to see to this feature.

    First, it'd be great if there was an "Accept & Copy" button which would accept the new password and copy it to the clipboard. On some (rare) occasions LastPass will miss one of the password fields -- it'd be handy to have the new password in the clipboard.

    Second, I'd feel a little better if LastPass would save off the old password when the update occurs. When I do this manually, I usually add something like "Previous password: pa8sFj#0!X" to notes field... just in case something goes wrong or some other part of the site is still using the old password.

    Thanks for such a great product!

    ReplyDelete
  2. Hi, I did this on a few sites and it seems to work first, may passwords got changed and saved when I clicked Confirm, however the saved URLs for LP to know where to use the username and passwords always got messed up the same time and replaced by this one: https://lastpass.com/change_pw.php

    Used Firefox under Windows.

    ReplyDelete
  3. Pat: We'll think about adding a 'accept & copy' button. You can access old usernames and passwords from your online vault - see http://helpdesk.lastpass.com/password-manager-basics/username-and-password-history/

    Letztes: Tools->Refresh Sites should restore the url. We are releasing a fix this morning.

    ReplyDelete
  4. We've released a fix, so if you reinstall via:

    http://lastpass.com/lp.php

    the problem shouldn't occur any more.

    Drew

    ReplyDelete
  5. I really like the "LastPass Security Challenge." But how do I know which passwords are old? Could you show how long ago I changed my password? It would be really helpful for the ones that already have good passwords, but maybe haven't been updated in a long time.

    ReplyDelete
  6. You can view the change date for individual sites in your password and/or username history: http://helpdesk.lastpass.com/password-manager-basics/username-and-password-history/

    We will look into expanding information provided in the security challenge to help you identify outdated passwords.

    ReplyDelete
  7. Don't forget that your passwords should contain at least 12 characters
    http://perspectives.ofutur.com/dailylife/privacy/your-passwords-should-be-at-least-12-characters-long/

    ReplyDelete
  8. One thing I'm not clear on. I have three Google accounts with 3 different usernames and three different passwords. How do I differentiate them in LP so that I can log in as identiy A or B or C...???

    ReplyDelete
  9. @Michael, hopefully this should help: http://helpdesk.lastpass.com/password-manager-basics/multiple-logins/

    ReplyDelete
  10. This comment has been removed by the author.

    ReplyDelete
  11. Since downloading and setting up lastpass using chrome, which is the browser I always use, all of my bookmarks have been reordered. How do I revert them back to the order in which I painstakingly arranged and kept organized in the first place? I sure hope there's a simple way in which to revert back and please don't tell me I have to go through them all in a manager and rearrange them...please! Also, once I revert back to the order I originally had, will they remain that way? If not, how do I make them permanent??
    I'm currently so upset about all of my MANY bookmarks that I'm failing to see any value in this lastpass. It's also not even entering my saved passwords or asking me to remember my passwords when I visit sites I originally had saved id's and pins for through chrome. Grrrrrrrrrrrrrrrrrrrrhhhhhhhhhhhhhhhhhhhh.....
    Please HELP!!!!!

    ReplyDelete
  12. This comment has been removed by the author.

    ReplyDelete
  13. This comment has been removed by the author.

    ReplyDelete
  14. @PDB - One of the support channels would be a better place to reach out for help. Have you opened a support ticket at lastpass.com/my.php? The team will respond to your questions promptly.

    ReplyDelete
  15. OK...I did a ton more reading and found a resolution for my bookmark organization, here some troubleshooting info that worked for me, I did the download option in advanced settings under xmarks, hope this helps anyone else suffering from the same mess I was...
    http://wiki.foxmarks.com/wiki/XmarksForChrome:_Troubleshooting

    Now onto my other question that I still do not have an answer for...if I wanted to drop lastpass/xmarks altogether and go back to just using Chrome's bookmark sync/password sync...how do I do so and not lose all of the bookmarks and passwords I now have saved under lastpass/xmarks?

    Lastly, where do I go within lastpass if I would like to actually view and/or print a list up of all of my sites/id's/pin's???
    (obviously it must be lastpass that I go into somewhere to do this since xmarks states I have no passwords every time I do a sync)

    Appreciate any help from anyone! :)

    Sure wish this stuff was more ppl friendly, and to think I know my way around pc's quite well...grrrrrrrrrrrhhhhhhhhhhhhhhhh.......

    ReplyDelete
  16. Hi Amber...Thx! Not sure where I might find a "support channel"??? However, I do have an open ticket w/ Lastpass and they've said they are very busy and will be back to me as soon as possible. As you can see, I was able to fix the bookmark organization problem, however, I am still looking for my passwords. Might you help or direct me to the "support channel" you speak of? Perhaps a link you could share?
    Much appreciated!

    ReplyDelete
  17. OMG! What BS!!!! I still haven't heard back from Lastpass and it's been 48 hours since writing to them or submitting a support ticket! The message I rec'd back from them states that "premium paying" customers are helped first and if I want help, I have to pay and become a premium member!!! Besides ALL of the password issues, etc this product caused me after downloading...I thought I fixed the bookmark issue...NOT!!! Now when I go in under each bookmark category, there is NOTHING...no sites...absolutely NOTHING!!!! Where the F&$K did all of my sites go????????????????
    ...and here I was happy that I was able to get my arrangement/organization back after finally searching all over the internet for troubleshooting tips to fix this problem...it's only gotten WORSE!!!
    Lastpass was the BIGGEST mistake I have ever made AND NOW THEY WANT MY MONEY TO HELP ME W/ THEIR FAULTY PROGRAM!!! PLEASE TELL ME HOW TO REVERSE THIS LASTPASS S*#T OFF MY PC AND GO BACK TO NORMAL LIFE!!!! If I don't hear back from them on how to reverse this and get all of my bookmarks and passwords back that they have stolen from me...I will blog every where I can all over the internet so others are warned about what Lastpass does to get your money!!! COMPLETE FRAUD!!!!!!!!!!!!!!!!!!!!!!!!!!! I am beyond PISSED!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    ReplyDelete