If you are able to log in to your LastPass account with your email address and master password, follow the steps below.

Immediately log out of all active LastPass sessions (except for the one you're actively in).

1. In your web browser toolbar, click the inactive (grey or black) LastPass icon .
2. Enter your email address and master password, then click Log In.
3. If prompted, complete steps for multifactor authentication (if it is enabled on your account).
4. Click the LastPass icon in your browser toolbar.
5. Take the action that matches your navigational experience:
   • New experience – Select the Account tab, then go to Fix a problem yourself > Log out of LastPass everywhere.
   • Previous experience – Select Account Options OR < your username > at the bottom of the menu, then go to Advanced > Other Sessions.
6. Select Kill all but current session to remove all other sessions.

Once you only have your active session running, it is recommended that you change your master password for your LastPass account.

1. While logged in to LastPass, click the LastPass icon in your web browser toolbar.
2. Select Open My Vault.
3. Select Account Settings in the left navigation.
4. In the Login Credentials section under master password, click Change Master Password.
5. In the new web browser page or tab that opens, enter your current master password, then create a new master password. Enter a password hint (recommended – this is a clue that is sent in a reminder email to help you remember your master password if it is ever forgotten).
6. When finished, click Save Master Password.

   Result: You are logged out of LastPass.

7. Log back in to LastPass with your updated master password.

If your email address has also been compromised, it is recommended that you update your LastPass account email address using a different email address, as well as your security email address (if you had set one up prior to being compromised).

Check your account history for suspicious login activity.

1. Log in to LastPass and access your vault by doing either of the following:
   • In your web browser toolbar, click the LastPass icon and select Vault or Open My Vault.
   • Go to https://lastpass.com/?ac=1 and log in with your email address and master password.
2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
3. Go to Advanced Options > View account history.

Remove any unknown, untrusted, stolen, or previous devices.

1. Log in to LastPass and access your vault by doing either of the following:
   • In your web browser toolbar, click the LastPass icon and select Vault or Open My Vault.
   • Go to https://lastpass.com/?ac=1 and log in with your email address and master password.
2. If prompted, complete steps for multifactor authentication (if it is enabled for your account).
3. Select Account Settings in the left navigation.
4. Select the Mobile Devices tab.
5. Remove any device you do not recognize or trust.

If you know that you only access LastPass from one or more specific countries, you can update your login settings to restrict access to LastPass from only those allowed countries.

1. While logged in to LastPass, click the LastPass icon in your web browser toolbar.
2. Select Open My Vault.
3. Select Account Settings in the left navigation.
4. Click Show Advanced Settings at the bottom.
5. In the "Security" section for Country Restriction, enable the Only allow login from selected countries setting, then check the boxes of all countries from which you want to approve LastPass access.
6. Click Update when finished.

If you are no longer able to log in to your LastPass account, review the options below.