Protecting private information
As with all LastPass data, the above information is securely synced to LastPass servers. We use firewalls, secure transfer protocols, and industry-standard practices to protect the servers and service, as well as regular third-party audits for outside review and validation of our security and privacy measures. Any other personally identifiable vault Data (for example, usernames, passwords, information in notes, name of entries, values for form fields) is encrypted using our local-only encryption model, in which LastPass never knows your master password and never has access to personal information stored in your vault.
For more information LastPass security, please see the LastPass Technical Whitepaper.