LastPass Opens 2026 with Mission Expansion and New Secure Access Capabilities

Lean IT teams gain visibility over unapproved apps and AI; individuals get seamless, secure sign-ins from every device—all through a single browser extension

BOSTON--(BUSINESS WIRE)--LastPass, the secure access solution that helps organizations and users work, move faster, and stay protected, announced a series of major advancements designed to give users greater security, visibility, and control across work and life. At the center of this momentum is Secure Access Essentials: the foundational capabilities organizations and individuals need to stay protected in a world of endless apps, AI tools, and browser-based work.

Work has already shifted to the browser, and as AI accelerates how employees discover and adopt new tools, this channel has become the most important access path an organization can secure. For businesses, it means discovering unapproved SaaS and AI usage, controlling who has access to what, and securing every employee sign-in. For individuals, it means protecting passwords, simplifying day-to-day logins, and monitoring for compromised credentials on the dark web. LastPass delivers all of this through a single browser extension.

From a modernized security and adoption dashboard and flexible, custom admin-level permissions to a new Mac Desktop App and a smoother identity provider migration path, these updates deliver meaningful improvements for individuals, business users, and admins alike. These advances build on the momentum of recent platform investments and reflect the LastPass commitment to making trusted access possible for every organization—without added complexity or cost.

Momentum Highlights: Innovation That Matters

Secure Access Essentials is the foundation of the LastPass momentum: an approach that addresses three root causes of access risk for businesses and delivers practical protection for individuals, all from within the browser.

For lean IT teams at small and mid-sized businesses, Secure Access Essentials:

• Discovers apps + AI: LastPass helps give IT teams visibility into unapproved applications and AI tools in use across the organization, so they can act before risk becomes a breach.
  • Starting in April, admins can now monitor logins from both corporate and personal email domains to uncover approved and unapproved SaaS and AI usage.
  • Coming in early May, admins can gain additional visibility over risky credential use tied to both corporate and personal emails, enabling them to take action faster to improve SaaS and AI access security.
• Controls access for every employee: LastPass lets IT teams define, enforce, and audit who has access to what tools—reducing employee friction while maintaining the controls security demands.
• Simplifies secure access: LastPass unifies Password Management, SSO, and MFA, and further integrates with identity providers like Microsoft Entra to ensure every employee logs in securely, every time.

For individuals and families, Secure Access Essentials delivers:

• Password protection: The Password Manager securely stores and auto-fills credentials across every device and platform, eliminating the temptation to reuse passwords or write them down.
• Simple, secure access: With built-in MFA and seamless autofill, LastPass removes the daily friction of logging in without sacrificing security.
• Visibility into hidden risks: Dark Web Monitoring continuously scans for compromised credentials and alerts users when their personal or family data appears in known breaches so they can act before harm is done.

New Leadership: Chris Michelmore, Chief Revenue Officer

LastPass welcomed Chris Michelmore as Chief Revenue Officer, bringing experienced go-to-market leadership as the company accelerates growth around the expanded Secure Access Essentials mission.

Security & UX Improvements:

The company also introduced a host of enhancements to improve security and end-user experience, including:

• User Migration from AD FS to Microsoft Entra ID: Federated organizations can now switch their identity provider from AD FS to Entra ID without needing to de-federate users, making the transition smoother and far less disruptive.
• Modernized Security & Adoption Dashboards: A refreshed dashboard design delivers a cleaner, more intuitive Admin Console experience, which is part of a broader LastPass initiative to deliver next-generation design improvements across the Admin Console.
• Custom Admin-Level Permissions: These enhanced custom admin levels for Business, Business Max, and MSP customers enable greater flexibility and control over access.
• Mac Desktop App: Built on the Electron software framework to align with the recently released Windows desktop app, the new Mac app delivers a modernized, streamlined UI and the QuickFill Companion feature. Alongside LastPass for Safari, it is the only supported Mac desktop experience.

New Case Studies

• EBC Financial Group: LastPass helped EBC Financial Group improve access overnight and audit readiness while supporting fast-moving global teams handling sensitive client data.
• Love Struck: Food and beverages company, Love Struck, reduced day-to-day friction and protected operations across global teams with LastPass.
• Semester at Sea: Institute for Shipboard Education used LastPass to cut onboarding time in half for their Semester at Sea Program.

Featured Media

The LastPass security transformation continued to draw attention from leading technology publications in Q1 2026:

• "Can you trust LastPass in 2026? Inside the multimillion-dollar quest to rebuild its security culture" — ZDNet
• "LastPass CEO Karim Toubba on why it deserves your trust back after 2022 breach" — TechRadar
• "LastPass Review: Intuitive Apps and Free Dark Web Monitoring" — PCMag

Showcased Expertise

LastPass demonstrated their robust industry expertise through the following thought leadership pieces:

• I'm a cybersecurity professional, here’s why I’m preparing for an AI data breach, by Mike Kosak with TechRadar Pro
• Deepfake attack: ‘Many people could have been cheated’, by Karim Toubba with BBC News
• Building Trust Into Automated Cybersecurity Decisions, by Stephanie Schneider with IT Tribe
• The Right Role for Agentic AI in Security Operations, by Stephanie Schneider with Cyber Security Tribe
• Google Mandiant report spots faster, stealthier cyberattacks, by Mike Kosak with IT Brief

Industry Recognition

In early 2026, LastPass earned multiple accolades for innovation and leadership:

• Mario Platt, LastPass VP and CISO, won Security Magazine’s 2026 Top Cybersecurity Leaders Award
• LastPass was named a 2026 G2 Best Software Award Winner for Security Products
• LastPass was named a 2026 Global Infosec Award winner by Cyber Defense Magazine, taking home the Pioneering SMB Cybersecurity award

About LastPass

LastPass delivers Secure Access Essentials, helping individuals and organizations manage and protect access to AI, applications, and credentials straight from within the browser. Trusted by more than 100,000 businesses and millions of users worldwide, LastPass blends strong security with everyday simplicity. From uncovering unapproved AI and applications to reducing login friction and securing credentials across the business, LastPass helps teams and individuals stay productive, minimize risk, and remain prepared as their environments evolve. Discover how LastPass can help you work, move fast, and stay protected at www.lastpass.com and follow us on LinkedIn, X, Instagram, and Facebook.

Q&A
Understanding Secure Access Essentials
Q: What is Secure Access Essentials?
Secure Access Essentials are the foundational capabilities organizations and individuals need to stay protected in a world of endless apps, AI tools, and browser-based work. For businesses, it means discovering unapproved SaaS and AI usage, controlling who has access to what, and securing every employee sign-in. For individuals, it means protecting passwords, simplifying day-to-day logins, and monitoring for compromised credentials on the dark web. LastPass delivers all of this through a single browser extension.

Q: Who is Secure Access Essentials designed for?
Secure Access Essentials are built for lean IT teams at small and mid-sized organizations, including those with no dedicated security staff, and individuals and families who want to stay protected online without becoming security experts.

Q: Why does secure access matter for SMBs now more than ever?
The way people work has fundamentally changed. Employees log into dozens of applications daily, AI tools are entering workflows faster than IT teams can track, and most work now happens in the browser — often without any security controls in place. The tools most organizations rely on have not kept pace and are still too complex and expensive to deploy and maintain. For small and mid-sized businesses managing all of this with lean teams and tight budgets, the exposure is real and growing. A recent Cybernews study shows 59% of employees use unapproved AI tools, 80% of leaders cite data leakage as a top concern, financial stakes are significant with the average breach costing $10.22 million, and browser-based threats have surged — reinforcing the need for strong, browser-level security controls.

Q: Is LastPass easy to deploy for a small business or a non-technical team?
Yes. LastPass is delivered through a browser extension that requires no complex infrastructure or additional software to set up. IT administrators can deploy it across an organization quickly, and employees can be onboarded and offboarded with minimal friction. For organizations with no IT staff at all, LastPass is a self-service, intuitive solution, and does not require a large team or a large budget to implement.

Q: Is LastPass secure?
Yes, LastPass is secure. Over the last three years, LastPass made a multi-year, multi-million-dollar investment to rebuild its security foundation from the ground up. The company overhauled its people, processes and technology, implementing industry-leading standards including ISO 27001 and SOC2 certifications, hardware authentication across all employees, a public Trust Center and Compliance Center for real-time system monitoring and access to latest certifications, and a dedicated Threat Intelligence, Mitigation and Escalations (TIME) team. LastPass has also upgraded its encryption standards to 600,000 PBKDF2 SHA256 iterations and introduced passkey support to protect against modern AI-powered attacks. Today, LastPass operates at a security standard that goes beyond what is normally expected in the industry.

Q: What is Business Max?
Business Max is a LastPass SKU designed for organizations that need advanced SaaS governance. It includes SaaS Monitoring and SaaS Protect to detect, control, and secure access to SaaS and AI tools.