
If a dark web scan shows your credentials have been leaked online, you should immediately change the password for the breached website. If you used the same password on any other websites, you should change those as well.
Upon receiving a LastPass data breach alert:
By enabling dark web monitoring in the Security Dashboard, LastPass does a dark web scan and monitors your email addresses continuously in a database of breached credentials. If your information appears to be compromised, you immediately receive an email alert. In the vault, you’ll also see an alert next to the Security Dashboard menu item.
You’ll see either a “Secure” or “Compromised” status next to each email address, and more details of the alert will show to the right. You’ll see which website was breached and what information was leaked, so you know what to do next.
Now you can rest assured knowing that LastPass is protecting your digital security – even when you aren’t logged in.
- Click on “Change Password” to be taken to the website, where you can log in and go to the account settings.
- Find the option to change the password and use the LastPass password generator to create a new, random password.
- When you save the changes on the website, LastPass will automatically ask if you want to save the updated password to your vault, too.

