product icon

Manage Never URLs in Account Settings

    For certain sites, you may not want LastPass to store your credentials, generate a password, supply a form fill item, automatically log you on, or do something else. To prevent LastPass from taking specific actions for a specific website, you can add a Never URL.

    Restriction: If you have a LastPass Teams or LastPass Business account, the ability to perform these actions may be limited or prohibited due to policies enabled by your LastPass admin.

    Types of Never URLs

    There are two types of Never URLs, both of which can have wildcard(s) at the front and/or at the end.

    Note:  Using a wildcard character (*) is only supported for URLs and domains. It is mandatory to always specify a top-level domain (TLD) (for example, .com).
    This type of Never URL can be used to disable LastPass for all pages under a domain.
    Note: A domain type Never URL without a subdomain will match every path on the domain and every subdomain as well.
    This type of Never URL can be used to disable LastPass only on selected pages of a domain.
    Note: For LastPass Business users, additional Global Never and Only URLs can be set by an admin, and will be labeled as "Enterprise Domain" in your list. Domains set by an admin cannot be edited or removed. Additionally, if you try to add a site manually for a URL or domain that is already set as a Global Never URL, you will encounter a message indicating a policy prohibits it.

    Add a Never URL

    1. Log in to LastPass and access your vault by doing either of the following:
      • In your web browser toolbar, click the LastPass icon active LastPass icon and select Vault or Open My Vault.
      • Go to and log in with your email address and master password.
    2. Select Account Settings in the left navigation.
    3. Click the Never URLs tab, then click Add.
    4. Choose from the following Type of data you wish to prevent LastPass from supplying:
      • Never Add Site – Prevents prompting the notification to add a Site.
      • Never Generate Password – Prevents the in-field Generate Password icon from appearing in the field.
      • Never Fill Forms – Prevents prompting the notification to use a Form Fill.
      • Never AutoLogin* – Prevents the Site from automatically logging in.
      • Never AutoFill Application* – Prevents the automatic filling in the Site (the Site must be also listed under "Never AutoLogin").
      • Never Show Context Icons – Prevent the field icons from appearing.
      • Never do Anything – Disables LastPass on a Site entirely.
    5. Enter the URL of your desired site, which you can enter using the following example formats:
      Never URL Type Example Matches Example Non-Matches Action Domain,,,, Match every path and every subdomain URL, Match only the page "/" of a domain URL, Match only the page "/login" of a domain URL, Match only the page "/" of a subdomain* URL, Match every page of a domain (but not its subdomains)* URL, Match every page of a subdomain
      * URL,, Match the page "/login" of every subdomain
      ** URL,,, Match every page and every subdomain (equivalent to
      Note: While specifying one exact IP address is supported (for example,, specifying an IP address range (for example, or CIDR range (for example, is not supported.
    6. Once you have entered your desired URL(s) for each type, click Add.
    7. When finished, you can close the Account Settings window.
      Note:   If the site is launched from the LastPass vault or from the LastPass web browser extension, it will ignore the "Never AutoLogin" (as a Never URL) and "Disable Autofill" (site Preference) options.
    Results: You have successfully added your desired Never URL(s).

    Delete a Never URL

    1. To delete a "Never URL" that you have created, click on the Delete icon Remove.
    2. When prompted, click OK to confirm.
    Results: You have successfully deleted your selected Never URL.