LastPass announced a series of product updates and customer experience enhancements focused on access management, visibility and security as organizations face an increasingly AI-driven threat landscape.

The company pointed to findings from IBM’s 2026 Cost of a Data Breach Report, which found the average data breach costs organizations $4.99 million. The report also found AI-driven attacks increased 56% and added an average of $1 million to breach costs, while 92% of organizations experiencing AI-related breaches lacked appropriate AI access controls.

“As threat actors continue to automate and accelerate their attack tactics, strong identity, credential, and access management have become foundational security requirements, particularly for small and midsize businesses with limited resources,” said Karim Toubba, CEO of LastPass. “To address these evolving challenges, LastPass is dedicated to delivering the innovations that help organizations and individuals reduce risk while making security easier to manage.”

Expanded SaaS Monitoring and SaaS Protect

LastPass expanded its SaaS Monitoring and SaaS Protect capabilities within its Business Max offering. The updates are designed to provide businesses with greater visibility and control over their SaaS environments.

Persistent Monitoring maintains continuous visibility through a permanent connection to the LastPass browser extension. This allows monitoring to remain active even when users are signed out of LastPass.

The company also expanded SaaS Protect usage rules, allowing administrators to establish more granular policies for specific users or groups. According to LastPass, the enhancements are intended to help organizations accelerate adoption, reduce manual workloads, improve security coverage and strengthen policy enforcement.

The company said all of the enhancements had been fully released as of July, including Persistent Monitoring across all browser extensions.

Mobile Smart Scanner Converts Passwords Into Credentials

LastPass also launched what it describes as the industry's first Mobile Smart Scanner. The feature allows users to scan passwords from printed lists, screenshots, handwritten notes and other physical sources using the LastPass Mobile app.

The scanned passwords can then be converted into editable credentials that are ready for autofill. LastPass said the feature is designed to reduce manual data entry, save time and minimize errors while moving credentials into encrypted vaults.

Redesigned LastPass Community

The company introduced a redesigned LastPass Community experience intended to make it easier for customers to find information, connect with peers and get more value from the platform.

The updated Community includes a more intuitive interface, expanded self-service resources, topical portals and AI-powered search. LastPass said the platform is part of a broader self-service strategy that also includes social platforms such as Reddit and LinkedIn.

Security and Administration Updates

LastPass said it completed independent SOC 2 and ISO 27001/27701 audits for the second consecutive year with zero findings.

The company is also rolling out automatic enrollment for Dark Web Monitoring across consumer accounts. The change moves the service from a historically opt-in model toward a more proactive protection approach.

Dark Web Monitoring checks user information against databases of compromised credentials and alerts users when personal data is found on dark web sites. The service also notifies users about potential threats such as weak passwords.

LastPass has additionally completed its transition from the Legacy Admin Console to a single Unified Admin Console. The consolidated platform brings management capabilities into one centralized environment for administrators across business offerings.

For Teams, Business and Business Max customers, LastPass has introduced a company-wide sign-up link that allows organizations to onboard their entire workforce through a single shareable link. The company said the change is intended to reduce administrative effort and accelerate deployment.